CVE ID:	CVE-2024-21885
Description:	A flaw was found in X.Org server. In the XISendDeviceHierarchyEvent function, it is possible to exceed the allocated array length when certain new device IDs are added to the xXIHierarchyInfo struct. This can trigger a heap buffer overflow condition, which may lead to an application crash or remote code execution in SSH X11 forwarding environments.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2024-21885 RHBZ#2256540 https://bugzilla.redhat.com/show_bug.cgi?id=2256540 RHSA-2024:0320 https://access.redhat.com/errata/RHSA-2024:0320 RHSA-2024:0557 https://access.redhat.com/errata/RHSA-2024:0557 RHSA-2024:0558 https://access.redhat.com/errata/RHSA-2024:0558 RHSA-2024:0597 https://access.redhat.com/errata/RHSA-2024:0597 RHSA-2024:0607 https://access.redhat.com/errata/RHSA-2024:0607 RHSA-2024:0614 https://access.redhat.com/errata/RHSA-2024:0614 RHSA-2024:0617 https://access.redhat.com/errata/RHSA-2024:0617 RHSA-2024:0621 https://access.redhat.com/errata/RHSA-2024:0621 RHSA-2024:0626 https://access.redhat.com/errata/RHSA-2024:0626 RHSA-2024:0629 https://access.redhat.com/errata/RHSA-2024:0629 RHSA-2024:2169 https://access.redhat.com/errata/RHSA-2024:2169 RHSA-2024:2170 https://access.redhat.com/errata/RHSA-2024:2170 RHSA-2024:2995 https://access.redhat.com/errata/RHSA-2024:2995 RHSA-2024:2996 https://access.redhat.com/errata/RHSA-2024:2996 https://access.redhat.com/security/cve/CVE-2024-21885 https://access.redhat.com/security/cve/CVE-2024-21885 https://security.netapp.com/advisory/ntap-20240503-0004/ https://security.netapp.com/advisory/ntap-20240503-0004/