Bug#1150932: mutter: CVE-2026-108094

[Moritz Mühlenhoff]

Source: mutter
X-Debbugs-CC: team at security.debian.org
Severity: important
Tags: security

Hi,

The following vulnerability was published for mutter.

CVE-2026-108094[0]:
| A use-after-free flaw was found in mutter in the Wayland color-
| management ICC image-description path. A local attacker who can run
| a malicious Wayland client can destroy a wp_image_description_v1
| resource while an asynchronous ICC file read is still in progress.
| When the read completes, the compositor uses the freed wl_resource,
| writes into freed memory, and frees a pointer derived from that
| memory. This can crash the GNOME session and may allow arbitrary
| code execution within the compositor process.

https://bugzilla.redhat.com/show_bug.cgi?id=2549511
https://gitlab.gnome.org/GNOME/mutter/-/issues/5025
https://gitlab.gnome.org/GNOME/mutter/-/merge_requests/5313


If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2026-108094
    https://www.cve.org/CVERecord?id=CVE-2026-108094

Please adjust the affected versions in the BTS as needed.