AZL-84842
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-84842.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-84842
- Upstream
- CVE-2026-34001
- Published
- 2026-04-23T16:16:24Z
- Modified
- 2026-08-28T17:48:03Z
- Summary
- CVE-2026-34001 affecting package xorg-x11-server-Xwayland for versions less than 24.1.6-4
- Details
-
A flaw was found in the X.Org X server. This use-after-free vulnerability occurs in the XSYNC fence triggering logic, specifically within the miSyncTriggerFence() function. An attacker with access to the X11 server can exploit this without user interaction, leading to a server crash and potentially enabling memory corruption. This could result in a denial of service or further compromise of the system.
- References