# CVE-2026-34001 ## Summary - **CVE ID:** CVE-2026-34001 - **Severity:** HIGH - **CVSS Score:** 7.8 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) - **CWE:** CWE-825 - **Published:** Apr 23, 2026 - **Last Modified:** Jul 15, 2026 ## Description A flaw was found in the X.Org X server. This use-after-free vulnerability occurs in the XSYNC fence triggering logic, specifically within the miSyncTriggerFence() function. An attacker with access to the X11 server can exploit this without user interaction, leading to a server crash and potentially enabling memory corruption. This could result in a denial of service or further compromise of the system. ## Affected Products - Red Hat — Red Hat Enterprise Linux 9 (0:1.15.0-6.el9_7.1) - Red Hat — Red Hat Enterprise Linux 10 (0:24.1.5-6.el10_1) - Red Hat — Red Hat Enterprise Linux 9 (0:23.2.7-6.el9_7) - Red Hat — Red Hat Enterprise Linux 9 (0:1.20.11-33.el9_7) - Red Hat — Red Hat Enterprise Linux 8 (0:1.20.11-28.el8_10) - Red Hat — Red Hat Enterprise Linux 8 (0:21.1.3-20.el8_10) - Red Hat — Red Hat Enterprise Linux 8 (0:1.15.0-9.el8_10) - Red Hat — Red Hat Enterprise Linux 10 (0:24.1.9-4.el10_2) - Red Hat — Red Hat Enterprise Linux 9 (0:1.20.11-34.el9_8) - Red Hat — Red Hat Enterprise Linux 9 (0:1.15.0-7.el9_8.1) - Red Hat — Red Hat Enterprise Linux 9 (0:24.1.9-4.el9_8) - Red Hat — Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions (0:21.1.3-5.el9_0) - Red Hat — Red Hat Enterprise Linux 9.4 Extended Update Support (0:22.1.9-8.el9_4) - Red Hat — Red Hat Enterprise Linux 10.0 Extended Update Support (0:24.1.5-6.el10_0) - Red Hat — Red Hat Enterprise Linux 7 Extended Lifecycle Support (0:1.20.4-34.el7_9) - Red Hat — Red Hat Enterprise Linux 9.4 Extended Update Support (0:1.13.1-8.el9_4.9) - Red Hat — Red Hat Enterprise Linux 9.6 Extended Update Support (0:1.20.11-33.el9_6) - Red Hat — Red Hat Enterprise Linux 9.6 Extended Update Support (0:23.2.7-6.el9_6) - Red Hat — Red Hat Enterprise Linux 9.4 Extended Update Support (0:1.20.11-28.el9_4) - Red Hat — Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions (0:21.1.3-10.el9_2) - Red Hat — Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions (0:1.20.11-20.el9_2) - Red Hat — Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions (0:1.12.0-14.el9_2.14) - Red Hat — Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions (0:1.20.11-13.el9_0) - Red Hat — Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support (0:21.1.3-2.el8_6.6) - Red Hat — Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support (0:1.20.11-7.el8_6) - Red Hat — Red Hat Enterprise Linux 8.6 Telecommunications Update Service (0:21.1.3-2.el8_6.6) - Red Hat — Red Hat Enterprise Linux 8.6 Telecommunications Update Service (0:1.20.11-7.el8_6) - Red Hat — Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions (0:21.1.3-2.el8_6.6) - Red Hat — Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions (0:1.20.11-7.el8_6) - Red Hat — Red Hat Enterprise Linux 8.8 Telecommunications Update Service (0:21.1.3-13.el8_8) - Red Hat — Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions (0:21.1.3-13.el8_8) - Red Hat — Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support (0:1.20.10-4.el8_4) - Red Hat — Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On (0:1.20.10-4.el8_4) - Red Hat — Red Hat Enterprise Linux 8.8 Telecommunications Update Service (0:1.20.11-18.el8_8) - Red Hat — Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions (0:1.20.11-18.el8_8) - Red Hat — Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions (0:1.11.0-22.el9_0.17) - Red Hat — Red Hat Enterprise Linux 9.6 Extended Update Support (0:1.14.1-10.el9_6) - Red Hat — Red Hat Enterprise Linux 7 Extended Lifecycle Support (0:1.8.0-36.el7_9.4) - Red Hat — Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support (0:1.11.0-8.el8_4.15) - Red Hat — Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On (0:1.11.0-8.el8_4.15) - Red Hat — Red Hat Enterprise Linux 8.8 Telecommunications Update Service (0:1.12.0-15.el8_8.17) - Red Hat — Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions (0:1.12.0-15.el8_8.17) - Red Hat — Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION (0:1.1.0-25.el6_10.16) - Red Hat — Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support (0:1.12.0-6.el8_6.17) - Red Hat — Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On (0:1.12.0-6.el8_6.17) ## References - [CNA](https://access.redhat.com/security/cve/CVE-2026-34001) - [CNA](https://bugzilla.redhat.com/show_bug.cgi?id=2451109) - [CNA](https://access.redhat.com/errata/RHSA-2026:10739) - [CNA](https://access.redhat.com/errata/RHSA-2026:11352) - [CNA](https://access.redhat.com/errata/RHSA-2026:11369) - [CNA](https://access.redhat.com/errata/RHSA-2026:11388) - [CNA](https://access.redhat.com/errata/RHSA-2026:11692) - [CNA](https://access.redhat.com/errata/RHSA-2026:11656) - [CNA](https://access.redhat.com/errata/RHSA-2026:13414) - [CNA](https://access.redhat.com/errata/RHSA-2026:19125) - [CNA](https://access.redhat.com/errata/RHSA-2026:19343) - [CNA](https://access.redhat.com/errata/RHSA-2026:19342) - [CNA](https://access.redhat.com/errata/RHSA-2026:19344) - [CNA](https://access.redhat.com/errata/RHSA-2026:20562) - [CNA](https://access.redhat.com/errata/RHSA-2026:20560) - [CNA](https://access.redhat.com/errata/RHSA-2026:20558) - [CNA](https://access.redhat.com/errata/RHSA-2026:20561) - [CNA](https://access.redhat.com/errata/RHSA-2026:20563) - [CNA](https://access.redhat.com/errata/RHSA-2026:20575) - [CNA](https://access.redhat.com/errata/RHSA-2026:20590) - [CNA](https://access.redhat.com/errata/RHSA-2026:20555) - [CNA](https://access.redhat.com/errata/RHSA-2026:20547) - [CNA](https://access.redhat.com/errata/RHSA-2026:20557) - [CNA](https://access.redhat.com/errata/RHSA-2026:20576) - [CNA](https://access.redhat.com/errata/RHSA-2026:21699) - [CNA](https://access.redhat.com/errata/RHSA-2026:21712) - [CNA](https://access.redhat.com/errata/RHSA-2026:21716) - [CNA](https://access.redhat.com/errata/RHSA-2026:21718) - [CNA](https://access.redhat.com/errata/RHSA-2026:21715) - [CNA](https://access.redhat.com/errata/RHSA-2026:21741) - [CNA](https://access.redhat.com/errata/RHSA-2026:21742) - [CNA](https://access.redhat.com/errata/RHSA-2026:22424) - [CNA](https://access.redhat.com/errata/RHSA-2026:22456) - [CNA](https://access.redhat.com/errata/RHSA-2026:23254) - [CNA](https://access.redhat.com/errata/RHSA-2026:23255) - [CNA](https://access.redhat.com/errata/RHSA-2026:23496) - [CNA](https://access.redhat.com/errata/RHSA-2026:24341) - [redhat-SADP](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34001.json) ## Exploitation Prediction (EPSS) - **EPSS Score:** 0.26% - **EPSS Percentile:** 18.1 --- _Exported from OnDuty AI Vulnerability Intelligence on 2026-09-09._