CVE-2015-8025: Canonical Ubuntu Linux

Low severity, CVSS 2.1. EPSS: 0.5% chance of exploitation in the next 30 days.

driver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency check, which allows physically proximate attackers to bypass the lock screen by hot swapping monitors.

Affected products

• Canonical Ubuntu Linux: version 12.04 only
• Xscreensaver Project Xscreensaver: version 5.33 only

Published 2015-11-10. Last modified 2026-06-17.