ZDI-26-759: X.Org Server XKB TextDoodad Double Free Privilege Escalation Vulnerability
ZDI discloses a local X.Org Server XKB double-free that can escalate privileges.
ZDI advisory ZDI-26-759 describes a double-free in X.Org Server XKB TextDoodad handling that can escalate privileges. A local attacker must already be able to run low-privileged code on the system. ZDI assigns CVSS 7.8 and CVE-2026-88812. The advisory does not state that exploitation has been observed.
52