CVE-2026-34001
Xorg: xwayland: x.org x server: use-after-free vulnerability leads to server crash and potential memory corruption
CVSS Score
7.8
EPSS Score
0.0%
EPSS Percentile
0th
A flaw was found in the X.Org X server. This use-after-free vulnerability occurs in the XSYNC fence triggering logic, specifically within the miSyncTriggerFence() function. An attacker with access to the X11 server can exploit this without user interaction, leading to a server crash and potentially enabling memory corruption. This could result in a denial of service or further compromise of the system.
| CWE | CWE-825 |
| Vendor | red hat |
| Product | red hat enterprise linux 10 |
| Published | Apr 23, 2026 |
| Last Updated | Jun 8, 2026 |
Stay Ahead of the Next One
Get instant alerts for red hat red hat enterprise linux 10
Be the first to know when new high vulnerabilities affecting red hat red hat enterprise linux 10 are published โ delivered to Slack, Telegram or Discord.
Get Free Alerts โ
Free ยท No credit card ยท 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected Versions
Red Hat / Red Hat Enterprise Linux 10
All versions affected Red Hat / Red Hat Enterprise Linux 10
All versions affected Red Hat / Red Hat Enterprise Linux 10.0 Extended Update Support
All versions affected Red Hat / Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
All versions affected Red Hat / Red Hat Enterprise Linux 7 Extended Lifecycle Support
All versions affected Red Hat / Red Hat Enterprise Linux 7 Extended Lifecycle Support
All versions affected Red Hat / Red Hat Enterprise Linux 8
All versions affected Red Hat / Red Hat Enterprise Linux 8
All versions affected Red Hat / Red Hat Enterprise Linux 8
All versions affected Red Hat / Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
All versions affected Red Hat / Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
All versions affected Red Hat / Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
All versions affected Red Hat / Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
All versions affected Red Hat / Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
All versions affected Red Hat / Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
All versions affected Red Hat / Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
All versions affected Red Hat / Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
All versions affected Red Hat / Red Hat Enterprise Linux 8.6 Telecommunications Update Service
All versions affected Red Hat / Red Hat Enterprise Linux 8.6 Telecommunications Update Service
All versions affected Red Hat / Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions
All versions affected Red Hat / Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions
All versions affected Red Hat / Red Hat Enterprise Linux 8.8 Telecommunications Update Service
All versions affected Red Hat / Red Hat Enterprise Linux 8.8 Telecommunications Update Service
All versions affected Red Hat / Red Hat Enterprise Linux 8.8 Telecommunications Update Service
All versions affected Red Hat / Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
All versions affected Red Hat / Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
All versions affected Red Hat / Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
All versions affected Red Hat / Red Hat Enterprise Linux 9
All versions affected Red Hat / Red Hat Enterprise Linux 9
All versions affected Red Hat / Red Hat Enterprise Linux 9
All versions affected Red Hat / Red Hat Enterprise Linux 9
All versions affected Red Hat / Red Hat Enterprise Linux 9
All versions affected Red Hat / Red Hat Enterprise Linux 9
All versions affected Red Hat / Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
All versions affected Red Hat / Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
All versions affected Red Hat / Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
All versions affected Red Hat / Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions
All versions affected Red Hat / Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions
All versions affected Red Hat / Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions
All versions affected Red Hat / Red Hat Enterprise Linux 9.4 Extended Update Support
All versions affected Red Hat / Red Hat Enterprise Linux 9.4 Extended Update Support
All versions affected Red Hat / Red Hat Enterprise Linux 9.4 Extended Update Support
All versions affected Red Hat / Red Hat Enterprise Linux 9.6 Extended Update Support
All versions affected Red Hat / Red Hat Enterprise Linux 9.6 Extended Update Support
All versions affected Red Hat / Red Hat Enterprise Linux 9.6 Extended Update Support
All versions affected Red Hat / Red Hat Enterprise Linux 6
All versions affected References
access.redhat.com: https://access.redhat.com/errata/RHSA-2026:10739 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:11352 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:11369 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:11388 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:11656 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:11692 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:13414 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19125 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19342 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19343 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19344 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:20547 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:20555 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:20557 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:20558 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:20560 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:20561 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:20562 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:20563 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:20575 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:20576 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:20590 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:21699 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:21712 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:21715 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:21716 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:21718 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:21741 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:21742 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22424 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22456 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:23254 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:23255 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:23496 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:24341 access.redhat.com: https://access.redhat.com/security/cve/CVE-2026-34001 bugzilla.redhat.com: https://bugzilla.redhat.com/show_bug.cgi?id=2451109
Credits
Red Hat would like to thank Jan-Niklas Sohn (TrendAI Zero Day Initiative) for reporting this issue.