A flaw was found in the X.Org X server. This use-after-free vulnerability occurs in the XSYNC fence triggering logic, specifically within the miSyncTriggerFence() function. An attacker with access to the X11 server can exploit this without user interaction, leading to a server crash and potentially enabling memory corruption. This could result in a denial of service or further compromise of the system.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade tigervnc-selinuxUpgrade tigervnc-iconsUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-licenseUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-serverUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-develUpgrade tigervncUpgrade xorg-x11-server-common | Apr 29, 2026 | Apr 27, 2026 |
| Alpine Linux | — | Upgrade xorg-serverUpgrade xwayland | Apr 24, 2026 | Apr 23, 2026 |
| Amazon Linux Ami 2 | — | Upgrade tigervnc-serverUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-iconsUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-XdmxUpgrade tigervnc-server-appletUpgrade xorg-x11-server-XvfbUpgrade xorg-x11-server-sourceUpgrade tigervnc-server-minimalUpgrade tigervnc-server-moduleUpgrade tigervncUpgrade tigervnc-licenseUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xephyr | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-serverUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-XwaylandUpgrade tigervncUpgrade xorg-x11-server-Xorg-debuginfoUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-selinuxUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade xorg-x11-server-debugsourceUpgrade tigervnc-iconsUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-sourceUpgrade tigervnc-licenseUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-develUpgrade xorg-x11-server-commonUpgrade tigervnc-server-minimalUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-XvfbUpgrade tigervnc-debuginfoUpgrade xorg-x11-server-XorgUpgrade tigervnc-server-module-debuginfoUpgrade tigervnc-server-minimal-debuginfoUpgrade tigervnc-debugsource | May 4, 2026 | Apr 23, 2026 |
| Debian | — | Upgrade xorg-server | May 17, 2026 | May 17, 2026 |
| Freebsd | — | Upgrade xorg-serverUpgrade xwayland | Apr 16, 2026 | Apr 14, 2026 |
| Gentoo Linux | — | Upgrade x11-base/xwayland.Upgrade x11-base/xorg-server. | Aug 17, 2026 | Aug 17, 2026 |
| Oracle_linux | — | Upgrade xorg-x11-server-XorgUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xwayland-develUpgrade xorg-x11-server-XdmxUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-Xvfb | Apr 29, 2026 | Apr 23, 2026 |
| Redhat_linux | — | Upgrade tigervnc-server-moduleUpgrade tigervnc-debuginfoUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-develUpgrade xorg-x11-server-XvfbUpgrade tigervnc-server-appletUpgrade tigervnc-selinuxUpgrade tigervnc-licenseUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-sourceUpgrade xorg-x11-server-XdmxUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoNo solution existsUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-server-debuginfoUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xwayland-develUpgrade tigervncUpgrade tigervnc-serverUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade tigervnc-iconsUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-XorgUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-Xnest | Apr 29, 2026 | Apr 23, 2026 |
| Rocky_linux | — | Upgrade xorg-x11-server-Xnest-debuginfoUpgrade xorg-x11-server-Xorg-debuginfoUpgrade tigervnc-debugsourceUpgrade xorg-x11-server-XorgUpgrade tigervnc-serverUpgrade xorg-x11-server-debugsourceUpgrade xorg-x11-server-Xwayland-debuginfoUpgrade tigervnc-server-moduleUpgrade xorg-x11-server-debuginfoUpgrade tigervnc-server-module-debuginfoUpgrade xorg-x11-server-XwaylandUpgrade tigervnc-server-minimalUpgrade xorg-x11-server-Xwayland-develUpgrade tigervnc-server-minimal-debuginfoUpgrade xorg-x11-server-XephyrUpgrade xorg-x11-server-Xdmx-debuginfoUpgrade xorg-x11-server-Xvfb-debuginfoUpgrade tigervnc-debuginfoUpgrade tigervnc-server-debuginfoUpgrade xorg-x11-server-commonUpgrade xorg-x11-server-develUpgrade xorg-x11-server-Xwayland-debugsourceUpgrade xorg-x11-server-XnestUpgrade xorg-x11-server-Xephyr-debuginfoUpgrade xorg-x11-server-XvfbUpgrade tigervncUpgrade xorg-x11-server-Xdmx | Apr 29, 2026 | Apr 28, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub