Out-of-Bounds Read Vulnerability in X.Org X Server by Red Hat
CVE-2026-34000
Key Information:
What is CVE-2026-34000?
A flaw has been identified in the X.Org X server related to out-of-bounds reading, specifically affecting the XKB geometry processing functions, CheckSetGeom() and XkbAddGeomKeyAlias. This vulnerability allows an attacker with access to the X11 server, either locally or remotely, to exploit the flaw without requiring user interaction. Successful exploitation can lead to the disclosure of sensitive memory contents, or potentially result in a denial of service through server crashes.
Affected Version(s)
Red Hat Enterprise Linux 10.0 Extended Update Support 0:24.1.5-6.el10_0
Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION 0:1.1.0-25.el6_10.16
Red Hat Enterprise Linux 7 Extended Lifecycle Support 0:1.20.4-34.el7_9
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved