Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 528
Alerts This Week
Warning Icon 1 528

SUSE Xwayland Important Heap Overflow Memory Management Vuln 2026-22617-1

suse
Calendar Grey July 16, 2026
Scroller Suse
A vital SUSE update for xwayland addresses critical security issues to enhance system resilience against exploits.
A security update for xwayland addresses two vulnerabilities in SUSE Linux Enterprise Server 16.0 and SAP applications, mitigating risks of buffer overflow and use-after-free issue...

Summary

## This update for xwayland fixes the following issues * CVE-2026-55999: missing bounds check in `glamor_font_get` can lead to a heap buffer overflow when a font loaded from a malicious PCF file is processed (bsc#1268893). * CVE-2026-56000: improper memory management in `CommonMakeCurrent` can lead to a heap use-after-free when an interaction with a malicious client creating GLX contexts happens (bsc#1268894). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-1194=1 * SUSE Linux Enterprise Server for SAP applications 16.0 zypper in -t patch SUSE-SLES-16.0-1194=1 ## Package List:

Topics%20covered

Topics Covered

security advisory SuSE important heap overflow memory management Xwayland

References

* bsc#1268893

* bsc#1268894

Cross-

* CVE-2026-55999

* CVE-2026-56000

CVSS scores:

* CVE-2026-55999 ( SUSE ): 7.3

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

* CVE-2026-55999 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

* CVE-2026-55999 ( NVD ): 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

* CVE-2026-55999 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

* CVE-2026-56000 ( SUSE ): 7.3

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

* CVE-2026-56000 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

* CVE-2026-56000 ( NVD ): 9.0

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:22617-1
Release Date: 2026-07-10T08:53:56Z
Rating: important

Topics%20covered

Topics Covered

security advisory SuSE important heap overflow memory management Xwayland

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.