---
id: CVE-2024-0409
title: 'Xorg-x11-server: selinux context corruption'
summary: >-
  A flaw was found in the X.Org server. The cursor code in both Xephyr and
  Xwayland uses the wrong type of private at creation. It uses the cursor bits
  type with the cursor as private, and when initiating the cursor, that
  overwrites the XS…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
cwe:
  - CWE-787
vendor: Red Hat
product: xorg-server
affected:
  - xorg-server >= 21.1.0 < 21.1.11
  - xorg-x11-server (all versions)
  - xorg-x11-server (all versions)
  - xorg-x11-server-Xwayland (all versions)
  - xorg-x11-server (all versions)
  - xorg-x11-server-Xwayland (all versions)
  - tigervnc
  - xorg-x11-server
  - tigervnc
  - tigervnc
  - tigervnc
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2024-01-18T16:47:29.032982Z'
published: '2024-01-18'
updated: '2026-11-04'
sourceUpdated: '2026-11-04T21:07:40.022Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2024-0409'
references:
  - url: 'https://access.redhat.com/errata/RHSA-2024:0320'
    label: 'RHSA-2024:0320'
  - url: 'https://access.redhat.com/errata/RHSA-2024:2169'
    label: 'RHSA-2024:2169'
  - url: 'https://access.redhat.com/errata/RHSA-2024:2170'
    label: 'RHSA-2024:2170'
  - url: 'https://access.redhat.com/errata/RHSA-2024:2995'
    label: 'RHSA-2024:2995'
  - url: 'https://access.redhat.com/errata/RHSA-2024:2996'
    label: 'RHSA-2024:2996'
  - url: 'https://access.redhat.com/security/cve/CVE-2024-0409'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2257690'
    label: RHBZ#2257690
tags:
  - cve.org
epss: 0.00356
epssPercentile: 0.29465
ingestedAt: '2026-11-05T21:36:00.597Z'
---

## Overview

A flaw was found in the X.Org server. The cursor code in both Xephyr and Xwayland uses the wrong type of private at creation. It uses the cursor bits type with the cursor as private, and when initiating the cursor, that overwrites the XSELINUX context.

## Affected

- `xorg-server >= 21.1.0 < 21.1.11`
- `xorg-x11-server (all versions)`
- `xorg-x11-server (all versions)`
- `xorg-x11-server-Xwayland (all versions)`
- `xorg-x11-server (all versions)`
- `xorg-x11-server-Xwayland (all versions)`
- `tigervnc`
- `xorg-x11-server`
- `tigervnc`
- `tigervnc`
- `tigervnc`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

### Workarounds

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.