CVE-2023-5380
MediumCVSS 4.7Exploitation Probability (EPSS)
Low risk49th percentile - higher than 49% of all known CVEs
Summary
A use-after-free flaw was found in the xorg-x11-server that may lead to an X server crash in a specific multi-screen configuration. The issue occurs when the pointer is warped from a window on one screen to the root window of another screen, followed by the destruction of the original window and then another window.
Risk Assessment
An X server crash in critical configurations may lead to service interruptions for graphical services, affecting system availability for users.
Recommendation
It is recommended to avoid using Zaphod mode and to monitor and update the X server to the latest version to minimize the risk of this vulnerability.
Original NVD description (English source)
A use-after-free flaw was found in the xorg-x11-server. An X server crash may occur in a very specific and legacy configuration (a multi-screen setup with multiple protocol screens, also known as Zaphod mode) if the pointer is warped from within a window on one screen to the root window of the other screen and if the original window is destroyed followed by another window being destroyed.