CVE-2026-34002: redhat enterprise_linux

Vulnerability summary

CVE-2026-34002 is a critical (CVSS 9.1) vulnerability in redhat enterprise_linux. EPSS estimates a 0.53% chance of exploitation in the next 30 days, higher than 43.3% of scored vulnerabilities.

Timeline

1. 05-05-2026
   PublishedVulnerability first disclosed.
2. 08-06-2026
   Last modifiedVulnerability information updated.

Description

A flaw was found in the X.Org X server. This vulnerability, an out-of-bounds read, affects the XKB (X Keyboard Extension) modifier map handling. An attacker with access to the X11 server can exploit this by sending a malformed request, which causes the server to read beyond its intended memory boundaries. This can lead to the exposure of sensitive information or cause the server to crash, resulting in a denial of service.

• CWE-805Buffer Access with Incorrect Length ValueThe product uses a sequential operation to read or write a buffer, but it uses an incorrect length value that causes it to access memory that is outside of the bounds of the buffer.