CVE-2026-34001

A flaw was found in the X.Org X server. This use-after-free vulnerability occurs in the XSYNC fence triggering logic, specifically within the miSyncTriggerFence() function. An attacker with access to the X11 server can exploit this without user interaction, leading to a server crash and potentially enabling memory corruption. This could result in a denial of service or further compromise of the system.
References
Link Resource
https://access.redhat.com/errata/RHSA-2026:10739
https://access.redhat.com/errata/RHSA-2026:11352
https://access.redhat.com/errata/RHSA-2026:11369
https://access.redhat.com/errata/RHSA-2026:11388
https://access.redhat.com/errata/RHSA-2026:11656
https://access.redhat.com/errata/RHSA-2026:11692
https://access.redhat.com/errata/RHSA-2026:13414
https://access.redhat.com/errata/RHSA-2026:19125
https://access.redhat.com/errata/RHSA-2026:19342
https://access.redhat.com/errata/RHSA-2026:19343
https://access.redhat.com/errata/RHSA-2026:19344
https://access.redhat.com/errata/RHSA-2026:20547
https://access.redhat.com/errata/RHSA-2026:20555
https://access.redhat.com/errata/RHSA-2026:20557
https://access.redhat.com/errata/RHSA-2026:20558
https://access.redhat.com/errata/RHSA-2026:20560
https://access.redhat.com/errata/RHSA-2026:20561
https://access.redhat.com/errata/RHSA-2026:20562
https://access.redhat.com/errata/RHSA-2026:20563
https://access.redhat.com/errata/RHSA-2026:20575
https://access.redhat.com/errata/RHSA-2026:20576
https://access.redhat.com/errata/RHSA-2026:20590
https://access.redhat.com/errata/RHSA-2026:21699
https://access.redhat.com/errata/RHSA-2026:21712
https://access.redhat.com/errata/RHSA-2026:21715
https://access.redhat.com/errata/RHSA-2026:21716
https://access.redhat.com/errata/RHSA-2026:21718
https://access.redhat.com/errata/RHSA-2026:21741
https://access.redhat.com/errata/RHSA-2026:21742
https://access.redhat.com/errata/RHSA-2026:22424
https://access.redhat.com/errata/RHSA-2026:22456
https://access.redhat.com/errata/RHSA-2026:23254
https://access.redhat.com/errata/RHSA-2026:23255
https://access.redhat.com/errata/RHSA-2026:23496
https://access.redhat.com/errata/RHSA-2026:24341
https://access.redhat.com/security/cve/CVE-2026-34001
https://bugzilla.redhat.com/show_bug.cgi?id=2451109
https://access.redhat.com/errata/RHSA-2026:10739
https://access.redhat.com/errata/RHSA-2026:11352
https://access.redhat.com/errata/RHSA-2026:11369
https://access.redhat.com/errata/RHSA-2026:11388
https://access.redhat.com/errata/RHSA-2026:11656
https://access.redhat.com/errata/RHSA-2026:11692
https://access.redhat.com/errata/RHSA-2026:13414
https://access.redhat.com/errata/RHSA-2026:19125
https://access.redhat.com/errata/RHSA-2026:19342
https://access.redhat.com/errata/RHSA-2026:19343
https://access.redhat.com/errata/RHSA-2026:19344
https://access.redhat.com/errata/RHSA-2026:20547
https://access.redhat.com/errata/RHSA-2026:20555
https://access.redhat.com/errata/RHSA-2026:20557
https://access.redhat.com/errata/RHSA-2026:20558
https://access.redhat.com/errata/RHSA-2026:20560
https://access.redhat.com/errata/RHSA-2026:20561
https://access.redhat.com/errata/RHSA-2026:20562
https://access.redhat.com/errata/RHSA-2026:20563
https://access.redhat.com/errata/RHSA-2026:20575
https://access.redhat.com/errata/RHSA-2026:20576
https://access.redhat.com/errata/RHSA-2026:20590
https://access.redhat.com/errata/RHSA-2026:21699
https://access.redhat.com/errata/RHSA-2026:21712
https://access.redhat.com/errata/RHSA-2026:21715
https://access.redhat.com/errata/RHSA-2026:21716
https://access.redhat.com/errata/RHSA-2026:21718
https://access.redhat.com/errata/RHSA-2026:21741
https://access.redhat.com/errata/RHSA-2026:21742
https://access.redhat.com/errata/RHSA-2026:22424
https://access.redhat.com/errata/RHSA-2026:22456
https://access.redhat.com/errata/RHSA-2026:23254
https://access.redhat.com/errata/RHSA-2026:23255
https://access.redhat.com/errata/RHSA-2026:23496
https://access.redhat.com/errata/RHSA-2026:24341
https://access.redhat.com/security/cve/CVE-2026-34001
https://bugzilla.redhat.com/show_bug.cgi?id=2451109
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34001.json
Configurations

No configuration.

History

26 Oct 2026, 21:10

Type Values Removed Values Added
Summary
  • (es) Se encontró una falla en el servidor X.Org X. Esta vulnerabilidad de uso después de liberación ocurre en la lógica de activación de vallas XSYNC, específicamente dentro de la función miSyncTriggerFence(). Un atacante con acceso al servidor X11 puede explotar esto sin interacción del usuario, lo que lleva a un fallo del servidor y potencialmente habilitando la corrupción de memoria. Esto podría resultar en una denegación de servicio o un compromiso adicional del sistema.

Information

Published : 2026-04-23 16:16

Updated : 2026-10-26 21:10


NVD link : CVE-2026-34001

Mitre link : CVE-2026-34001

CVE.ORG link : CVE-2026-34001


JSON object : View

Products Affected

No product.

CWE
CWE-825

Expired Pointer Dereference