๐Ÿ” CVE Alert

CVE-2026-34001

HIGH 7.8

Xorg: xwayland: x.org x server: use-after-free vulnerability leads to server crash and potential memory corruption

CVSS Score
7.8
EPSS Score
0.0%
EPSS Percentile
0th

A flaw was found in the X.Org X server. This use-after-free vulnerability occurs in the XSYNC fence triggering logic, specifically within the miSyncTriggerFence() function. An attacker with access to the X11 server can exploit this without user interaction, leading to a server crash and potentially enabling memory corruption. This could result in a denial of service or further compromise of the system.

CWE CWE-825
Vendor red hat
Product red hat enterprise linux 10
Published Apr 23, 2026
Last Updated Jun 8, 2026
Stay Ahead of the Next One

Get instant alerts for red hat red hat enterprise linux 10

Be the first to know when new high vulnerabilities affecting red hat red hat enterprise linux 10 are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Affected Versions

Red Hat / Red Hat Enterprise Linux 10
All versions affected
Red Hat / Red Hat Enterprise Linux 10
All versions affected
Red Hat / Red Hat Enterprise Linux 10.0 Extended Update Support
All versions affected
Red Hat / Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
All versions affected
Red Hat / Red Hat Enterprise Linux 7 Extended Lifecycle Support
All versions affected
Red Hat / Red Hat Enterprise Linux 7 Extended Lifecycle Support
All versions affected
Red Hat / Red Hat Enterprise Linux 8
All versions affected
Red Hat / Red Hat Enterprise Linux 8
All versions affected
Red Hat / Red Hat Enterprise Linux 8
All versions affected
Red Hat / Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
All versions affected
Red Hat / Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
All versions affected
Red Hat / Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
All versions affected
Red Hat / Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
All versions affected
Red Hat / Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
All versions affected
Red Hat / Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
All versions affected
Red Hat / Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
All versions affected
Red Hat / Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
All versions affected
Red Hat / Red Hat Enterprise Linux 8.6 Telecommunications Update Service
All versions affected
Red Hat / Red Hat Enterprise Linux 8.6 Telecommunications Update Service
All versions affected
Red Hat / Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions
All versions affected
Red Hat / Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions
All versions affected
Red Hat / Red Hat Enterprise Linux 8.8 Telecommunications Update Service
All versions affected
Red Hat / Red Hat Enterprise Linux 8.8 Telecommunications Update Service
All versions affected
Red Hat / Red Hat Enterprise Linux 8.8 Telecommunications Update Service
All versions affected
Red Hat / Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
All versions affected
Red Hat / Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
All versions affected
Red Hat / Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
All versions affected
Red Hat / Red Hat Enterprise Linux 9
All versions affected
Red Hat / Red Hat Enterprise Linux 9
All versions affected
Red Hat / Red Hat Enterprise Linux 9
All versions affected
Red Hat / Red Hat Enterprise Linux 9
All versions affected
Red Hat / Red Hat Enterprise Linux 9
All versions affected
Red Hat / Red Hat Enterprise Linux 9
All versions affected
Red Hat / Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
All versions affected
Red Hat / Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
All versions affected
Red Hat / Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
All versions affected
Red Hat / Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions
All versions affected
Red Hat / Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions
All versions affected
Red Hat / Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions
All versions affected
Red Hat / Red Hat Enterprise Linux 9.4 Extended Update Support
All versions affected
Red Hat / Red Hat Enterprise Linux 9.4 Extended Update Support
All versions affected
Red Hat / Red Hat Enterprise Linux 9.4 Extended Update Support
All versions affected
Red Hat / Red Hat Enterprise Linux 9.6 Extended Update Support
All versions affected
Red Hat / Red Hat Enterprise Linux 9.6 Extended Update Support
All versions affected
Red Hat / Red Hat Enterprise Linux 9.6 Extended Update Support
All versions affected
Red Hat / Red Hat Enterprise Linux 6
All versions affected

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
access.redhat.com: https://access.redhat.com/errata/RHSA-2026:10739 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:11352 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:11369 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:11388 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:11656 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:11692 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:13414 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19125 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19342 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19343 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:19344 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:20547 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:20555 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:20557 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:20558 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:20560 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:20561 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:20562 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:20563 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:20575 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:20576 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:20590 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:21699 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:21712 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:21715 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:21716 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:21718 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:21741 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:21742 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22424 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22456 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:23254 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:23255 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:23496 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:24341 access.redhat.com: https://access.redhat.com/security/cve/CVE-2026-34001 bugzilla.redhat.com: https://bugzilla.redhat.com/show_bug.cgi?id=2451109

Credits

Red Hat would like to thank Jan-Niklas Sohn (TrendAI Zero Day Initiative) for reporting this issue.