CVE-2024-0408 Xorg-x11-server: selinux unlabeled glx pbuffer

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Identified in Xorg-x11-server Related to SELinux Issues Two vulnerabilities have been reported in the Xorg-x11-server, identified as CVE-2024-0408 and CVE-2024-0409. Both CVEs, published on January 18, 2024, affect systems utilizing SELinux, with CVE-2024-0408 involving unlabeled GLX pbuffer and CVE-2024-0409 concerning SELinux context corruption. 2 sources 41