AZL-84627

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-84627.json

JSON Data

https://api.osv.dev/v1/vulns/AZL-84627

Upstream

CVE-2026-34001

Published

2026-04-23T16:16:24Z

Modified

2026-09-20T05:32:18Z

Summary

CVE-2026-34001 affecting package xorg-x11-server 1.20.10-6

Details

A flaw was found in the X.Org X server. This use-after-free vulnerability occurs in the XSYNC fence triggering logic, specifically within the miSyncTriggerFence() function. An attacker with access to the X11 server can exploit this without user interaction, leading to a server crash and potentially enabling memory corruption. This could result in a denial of service or further compromise of the system.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-34001

Affected packages

Azure Linux:3 / xorg-x11-server

Package

Name: xorg-x11-server
Purl: pkg:rpm/azure-linux/xorg-x11-server

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Last Affected

1.20.10-6

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-84627.json"