Back Linuxsecurity Fedora 43: Critical NULL Pointer Dereference Vulnerability in xkbcomp
X.Org XKB keymap compiler Update Information : xkbcomp 1.5.0 (CVE-2018-15853, CVE-2018-15859, CVE-2018-15861, CVE-2018-15863)
X.Org XKB keymap compiler
xkbcomp 1.5.0 (CVE-2018-15853, CVE-2018-15859, CVE-2018-15861, CVE-2018-15863)
* Wed Dec 3 2025 Peter Hutterer - 1.5.0-1 - xkbcomp 1.5.0 (CVE-2018-15853, CVE-2018-15859, CVE-2018-15861, CVE-2018-15863)
* Wed Dec 3 2025 Peter Hutterer - 1.5.0-1 - xkbcomp 1.5.0 (CVE-2018-15853, CVE-2018-15859, CVE-2018-15861, CVE-2018-15863)
[ 1 ] Bug #2418046 - CVE-2018-15853 xkbcomp: Endless recursion in xkbcomp/expr.c resulting in a crash [fedora-42] [ 2 ] Bug #2418048 - CVE-2018-15863 xkbcomp: NULL pointer dereference in ResolveStateAndPredicate resulting in a crash [fedora-42] [ 3 ] Bug #2418050 - CVE-2018-15861 xkbcomp: NULL pointer dereference in ExprResolveLhs resulting in a crash [fedora-43] [ 4 ] Bug #2418053 - CVE-2018-15859 xkbcomp: NULL pointer dereference when parsing invalid atoms in ExprResolveLhs resulting in a crash [fedora-43]
[ 1 ] Bug #2418046 - CVE-2018-15853 xkbcomp: Endless recursion in xkbcomp/expr.c resulting in a crash [fedora-42] [ 2 ] Bug #2418048 - CVE-2018-15863 xkbcomp: NULL pointer dereference in ResolveStateAndPredicate resulting in a crash [fedora-42] [ 3 ] Bug #2418050 - CVE-2018-15861 xkbcomp: NULL pointer dereference in ExprResolveLhs resulting in a crash [fedora-43] [ 4 ] Bug #2418053 - CVE-2018-15859 xkbcomp: NULL pointer dereference when parsing invalid atoms in ExprResolveLhs resulting in a crash [fedora-43]
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-3a9b79ca0e' at the command line. For more information, refer to the dnf documentation available at
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
