# CVE-2026-34002

## Summary

- **CVE ID:** CVE-2026-34002
- **Severity:** MEDIUM
- **CVSS Score:** 6.1 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L)
- **CWE:** CWE-805
- **Published:** May 5, 2026
- **Last Modified:** Jun 8, 2026

## Description

A flaw was found in the X.Org X server. This vulnerability, an out-of-bounds read, affects the XKB (X Keyboard Extension) modifier map handling. An attacker with access to the X11 server can exploit this by sending a malformed request, which causes the server to read beyond its intended memory boundaries. This can lead to the exposure of sensitive information or cause the server to crash, resulting in a denial of service.

## Affected Products

- Red Hat — Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions (0:21.1.3-5.el9_0)
- Red Hat — Red Hat Enterprise Linux 9.4 Extended Update Support (0:22.1.9-8.el9_4)
- Red Hat — Red Hat Enterprise Linux 10.0 Extended Update Support (0:24.1.5-6.el10_0)
- Red Hat — Red Hat Enterprise Linux 7 Extended Lifecycle Support (0:1.20.4-34.el7_9)
- Red Hat — Red Hat Enterprise Linux 9.4 Extended Update Support (0:1.13.1-8.el9_4.9)
- Red Hat — Red Hat Enterprise Linux 9.6 Extended Update Support (0:1.20.11-33.el9_6)
- Red Hat — Red Hat Enterprise Linux 9.6 Extended Update Support (0:23.2.7-6.el9_6)
- Red Hat — Red Hat Enterprise Linux 9.4 Extended Update Support (0:1.20.11-28.el9_4)
- Red Hat — Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions (0:21.1.3-10.el9_2)
- Red Hat — Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions (0:1.20.11-20.el9_2)
- Red Hat — Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions (0:1.12.0-14.el9_2.14)
- Red Hat — Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions (0:1.20.11-13.el9_0)
- Red Hat — Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support (0:21.1.3-2.el8_6.6)
- Red Hat — Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support (0:1.20.11-7.el8_6)
- Red Hat — Red Hat Enterprise Linux 8.6 Telecommunications Update Service (0:21.1.3-2.el8_6.6)
- Red Hat — Red Hat Enterprise Linux 8.6 Telecommunications Update Service (0:1.20.11-7.el8_6)
- Red Hat — Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions (0:21.1.3-2.el8_6.6)
- Red Hat — Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions (0:1.20.11-7.el8_6)
- Red Hat — Red Hat Enterprise Linux 8.8 Telecommunications Update Service (0:21.1.3-13.el8_8)
- Red Hat — Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions (0:21.1.3-13.el8_8)
- Red Hat — Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support (0:1.20.10-4.el8_4)
- Red Hat — Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On (0:1.20.10-4.el8_4)
- Red Hat — Red Hat Enterprise Linux 8.8 Telecommunications Update Service (0:1.20.11-18.el8_8)
- Red Hat — Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions (0:1.20.11-18.el8_8)
- Red Hat — Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions (0:1.11.0-22.el9_0.17)
- Red Hat — Red Hat Enterprise Linux 9.6 Extended Update Support (0:1.14.1-10.el9_6)
- Red Hat — Red Hat Enterprise Linux 7 Extended Lifecycle Support (0:1.8.0-36.el7_9.4)
- Red Hat — Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support (0:1.11.0-8.el8_4.15)
- Red Hat — Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On (0:1.11.0-8.el8_4.15)
- Red Hat — Red Hat Enterprise Linux 8.8 Telecommunications Update Service (0:1.12.0-15.el8_8.17)
- Red Hat — Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions (0:1.12.0-15.el8_8.17)
- Red Hat — Red Hat Enterprise Linux 6 Extended Lifecycle Support  - EXTENSION (0:1.1.0-25.el6_10.16)
- Red Hat — Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support (0:1.12.0-6.el8_6.17)
- Red Hat — Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On (0:1.12.0-6.el8_6.17)

## References

- [CNA](https://access.redhat.com/security/cve/CVE-2026-34002)
- [CNA](https://bugzilla.redhat.com/show_bug.cgi?id=2451112)
- [CNA](https://access.redhat.com/errata/RHSA-2026:20562)
- [CNA](https://access.redhat.com/errata/RHSA-2026:20560)
- [CNA](https://access.redhat.com/errata/RHSA-2026:20558)
- [CNA](https://access.redhat.com/errata/RHSA-2026:20561)
- [CNA](https://access.redhat.com/errata/RHSA-2026:20563)
- [CNA](https://access.redhat.com/errata/RHSA-2026:20575)
- [CNA](https://access.redhat.com/errata/RHSA-2026:20590)
- [CNA](https://access.redhat.com/errata/RHSA-2026:20555)
- [CNA](https://access.redhat.com/errata/RHSA-2026:20547)
- [CNA](https://access.redhat.com/errata/RHSA-2026:20557)
- [CNA](https://access.redhat.com/errata/RHSA-2026:20576)
- [CNA](https://access.redhat.com/errata/RHSA-2026:21699)
- [CNA](https://access.redhat.com/errata/RHSA-2026:21712)
- [CNA](https://access.redhat.com/errata/RHSA-2026:21716)
- [CNA](https://access.redhat.com/errata/RHSA-2026:21718)
- [CNA](https://access.redhat.com/errata/RHSA-2026:21715)
- [CNA](https://access.redhat.com/errata/RHSA-2026:21741)
- [CNA](https://access.redhat.com/errata/RHSA-2026:21742)
- [CNA](https://access.redhat.com/errata/RHSA-2026:22424)
- [CNA](https://access.redhat.com/errata/RHSA-2026:22456)
- [CNA](https://access.redhat.com/errata/RHSA-2026:23254)
- [CNA](https://access.redhat.com/errata/RHSA-2026:23255)
- [CNA](https://access.redhat.com/errata/RHSA-2026:23496)
- [CNA](https://access.redhat.com/errata/RHSA-2026:24341)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.49%
- **EPSS Percentile:** 40.5

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-10._