GHSA-cjgm-66pw-5r9rHighCVSS 7.8

A flaw was found in the X.Org X server. This use-after-free vulnerability occurs in the XSYNC...

Published
April 23, 2026
Last Modified
May 20, 2026

🔗 CVE IDs covered (1)

📋 Description

A flaw was found in the X.Org X server. This use-after-free vulnerability occurs in the XSYNC fence triggering logic, specifically within the miSyncTriggerFence() function. An attacker with access to the X11 server can exploit this without user interaction, leading to a server crash and potentially enabling memory corruption. This could result in a denial of service or further compromise of the system.

🔗 References (15)