Skip to main content
Press slash or control plus K to focus the search. Use the arrow keys to navigate results and press enter to open a threat.
Reconnecting to live updates…
EPSS 0.3%top 82%

CVE-2026-34001: Expired Pointer Dereference in Red Hat Red Hat Enterprise Linux 10

0
High
VulnerabilityCVE-2026-34001cvecve-2026-34001
Published: 04/23/2026 (04/23/2026, 14:54:00 UTC)
Source: CVE Database V5
Vendor/Project: Red Hat
Product: Red Hat Enterprise Linux 10

Description

A flaw was found in the X.Org X server. This use-after-free vulnerability occurs in the XSYNC fence triggering logic, specifically within the miSyncTriggerFence() function. An attacker with access to the X11 server can exploit this without user interaction, leading to a server crash and potentially enabling memory corruption. This could result in a denial of service or further compromise of the system.

CVSS v3.1

Score 7.8high

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

redhat/xorg-x11-server-Xwayland
pkg:rpm/redhat/xorg-x11-server-Xwayland
Affected versions
=10<10.2

Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.

AI-Powered Analysis

Machine-generated threat intelligence

AILast updated: 07/15/2026, 09:01:29 UTC

Technical Analysis

This vulnerability is a use-after-free flaw in the X.Org X server, specifically within the XSYNC fence triggering logic implemented in the miSyncTriggerFence() function. It allows an attacker with access to the X11 server to trigger a server crash and potentially cause memory corruption without requiring user interaction. The vulnerability is tracked as CVE-2026-34001 and affects Red Hat Enterprise Linux 10 versions before 10.2. Red Hat has released security updates for the xorg-x11-server-Xwayland package to fix this issue, as documented in their official advisories RHSA-2026:10739 and RHSA-2026:11352.

Potential Impact

Exploitation of this vulnerability can cause the X.Org X server to crash, resulting in denial of service. Additionally, the use-after-free condition may lead to memory corruption, which could be leveraged for further compromise of the affected system. The CVSS v3.1 base score is 7.8 (High), reflecting the potential for high impact on confidentiality, integrity, and availability. No known exploits in the wild have been reported at this time.

Mitigation Recommendations

Red Hat has released official security updates addressing CVE-2026-34001 in the xorg-x11-server-Xwayland package for Red Hat Enterprise Linux 10. Users should apply these updates promptly to remediate the vulnerability. Detailed update instructions are available in Red Hat's advisory and knowledge base article (https://access.redhat.com/articles/11258). Since this is not a cloud service, remediation requires applying the vendor-provided patches. Patch status is confirmed by Red Hat advisories RHSA-2026:10739 and RHSA-2026:11352.

Pro Console: star threats, build custom feeds, automate alerts via Slack, email & webhooks.Upgrade to Pro

Technical Details

Data Version
5.2
Assigner Short Name
redhat
Date Reserved
2026-03-25T04:53:13.615Z
Cvss Version
3.1
State
PUBLISHED
Remediation Level
null
Vendor Advisory Urls
[{"url":"https://access.redhat.com/security/cve/CVE-2026-34001","vendor":"Red Hat"}]

Threat ID: 69ea9e7887115cfb686fc3ff

Added to database: 04/23/2026, 22:34:32 UTC

Last enriched: 07/15/2026, 09:01:29 UTC

Last updated: 07/31/2026, 19:22:58 UTC

Views: 101

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Need more coverage?

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses