CVE-2026-34000

Medium

Description

A flaw was found in the X.Org X server. This out-of-bounds read vulnerability in the XKB geometry processing, specifically within the `CheckSetGeom()` and `XkbAddGeomKeyAlias` functions, allows an attacker to read uninitialized or out-of-bounds memory. An attacker with a connection to the X11 server, either locally or remotely, can exploit this without user interaction. This could lead to the disclosure of memory contents or cause a denial of service by crashing the server.

SeverityMedium
CVSS6.1
Exploit probability—
ProductX.org X Server
PublishedMay 5, 2026
First seenMay 5, 2026

How to fix

Affected products

ProductAffected versionsFixed in
x.org x_serverNo range specified—
redhat enterprise_linux6.0, 7.0, 8.0, 9.0, 10.0—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.