This vulnerability arises from a flaw in the X.Org X server's handling of XKB key types requests, where insufficient validation permits an out-of-bounds memory access. A local attacker with limited privileges can exploit this by sending a specially crafted request to the X server. The vulnerability affects Red Hat Enterprise Linux 10 and can lead to confidentiality breaches or denial of service due to server crashes. The CVSS 3.1 base score is 7.8, indicating high severity with impacts on confidentiality, integrity, and availability. The vendor advisory is available but does not currently specify a remediation or patch status.

Successful exploitation can disclose sensitive information from memory or cause the X server to crash, resulting in denial of service. The vulnerability affects local users with some privileges and does not require user interaction. The CVSS vector indicates high impact on confidentiality, integrity, and availability. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-34003 for current remediation guidance. Until an official fix is released, limit local user access to trusted individuals and consider restricting access to the X server where feasible.