Debian Linux - xorg-server - None

xwayland - None

Ubuntu Linux - XSYNC Use-after-free in miSyncTriggerFence(). When walking the list of fences to trigger, miSyncTriggerFence() may call TriggerFence() for the current trigger, which end up calling the function SyncAwaitTriggerFired(). SyncAwaitTriggerFired() frees the entire await resource, which removes all triggers from that await, including the next entries in the list of fences, leading to a use-after-free.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1328-1 advisory.

    - CVE-2026-33999: XKB integer underflow in XkbSetCompatMap() (bsc#1260922).
    - CVE-2026-34000: XKB out-of-bounds read in CheckSetGeom() (bsc#1260923).
    - CVE-2026-34001: XSYNC use-after-free in miSyncTriggerFence() (bsc#1260924).
    - CVE-2026-34002: XKB out-of-bounds read in CheckModifierMap() (bsc#1260925).
    - CVE-2026-34003: XKB buffer overflow in CheckKeyTypes() (bsc#1260926).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1332-1 advisory.

    - CVE-2026-33999: XKB integer underflow in XkbSetCompatMap() (bsc#1260922).
    - CVE-2026-34000: XKB out-of-bounds read in CheckSetGeom() (bsc#1260923).
    - CVE-2026-34001: XSYNC use-after-free in miSyncTriggerFence() (bsc#1260924).
    - CVE-2026-34002: XKB out-of-bounds read in CheckModifierMap() (bsc#1260925).
    - CVE-2026-34003: XKB buffer overflow in CheckKeyTypes() (bsc#1260926).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1329-1 advisory.

    - CVE-2026-33999: XKB integer underflow in XkbSetCompatMap() (bsc#1260922).
    - CVE-2026-34000: XKB out-of-bounds read in CheckSetGeom() (bsc#1260923).
    - CVE-2026-34001: XSYNC use-after-free in miSyncTriggerFence() (bsc#1260924).
    - CVE-2026-34002: XKB out-of-bounds read in CheckModifierMap() (bsc#1260925).
    - CVE-2026-34003: XKB buffer overflow in CheckKeyTypes() (bsc#1260926).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1330-1 advisory.

    - CVE-2026-33999: XKB Integer Underflow in XkbSetCompatMap() (bsc#1260922).
    - CVE-2026-34000: XKB Out-of-bounds Read in CheckSetGeom() (bsc#1260923).
    - CVE-2026-34001: XSYNC Use-after-free in miSyncTriggerFence() (bsc#1260924).
    - CVE-2026-34002: XKB Out-of-bounds read in CheckModifierMap() (bsc#1260925).
    - CVE-2026-34003: XKB Buffer overflow in CheckKeyTypes() (bsc#1260926).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1335-1 advisory.

    - CVE-2026-33999: XKB Integer Underflow in XkbSetCompatMap() (bsc#1260922).
    - CVE-2026-34000: XKB Out-of-bounds Read in CheckSetGeom() (bsc#1260923).
    - CVE-2026-34001: XSYNC Use-after-free in miSyncTriggerFence() (bsc#1260924).
    - CVE-2026-34002: XKB Out-of-bounds read in CheckModifierMap() (bsc#1260925).
    - CVE-2026-34003: XKB Buffer overflow in CheckKeyTypes() (bsc#1260926).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1333-1 advisory.

    - CVE-2026-33999: XKB integer underflow in XkbSetCompatMap() (bsc#1260922).
    - CVE-2026-34000: XKB out-of-bounds read in CheckSetGeom() (bsc#1260923).
    - CVE-2026-34001: XSYNC use-after-free in miSyncTriggerFence() (bsc#1260924).
    - CVE-2026-34002: XKB out-of-bounds read in CheckModifierMap() (bsc#1260925).
    - CVE-2026-34003: XKB buffer overflow in CheckKeyTypes() (bsc#1260926).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1331-1 advisory.

    - CVE-2026-33999: XKB integer underflow in XkbSetCompatMap() (bsc#1260922).
    - CVE-2026-34000: XKB out-of-bounds read in CheckSetGeom() (bsc#1260923).
    - CVE-2026-34001: XSYNC use-after-free in miSyncTriggerFence() (bsc#1260924).
    - CVE-2026-34002: XKB out-of-bounds read in CheckModifierMap() (bsc#1260925).
    - CVE-2026-34003: XKB buffer overflow in CheckKeyTypes() (bsc#1260926).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 099423d1-3815-11f1-a284-589cfc10a551 advisory.

    X.Org project reports:
    Multiple issues have been found in the X server and Xwayland                  implementations published by X.Org for which we are releasing                  security fixes for in xorg-server-21.1.22 and xwayland-24.1.10.

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 7b6463c6-3813-11f1-a284-589cfc10a551 advisory.

    X.Org project reports:
    Multiple issues have been found in the X server and Xwayland                  implementations published by X.Org for which we are releasing                  security fixes for in xorg-server-21.1.22 and xwayland-24.1.10.

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of xorg-server installed on the remote host is prior to 1.20.14 / 21.1.22 / 21.1.4 / 24.1.10. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-104-02 advisory.

    New xorg-server packages are available for Slackware 15.0 and -current to fix security issues.

Tenable has extracted the preceding description block directly from the xorg-server security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - X.Org project reports: Multiple issues have been found in the X server and Xwayland     implementations published by X.Org for which we are releasing              security fixes for in xorg-     server-21.1.22 and xwayland-24.1.10. (CVE-2026-34001)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
306708	SUSE SLED15 / SLES15 Security Update : xwayland (SUSE-SU-2026:1328-1)	Nessus	SuSE Local Security Checks	high
306704	SUSE SLES12 Security Update : xorg-x11-server (SUSE-SU-2026:1332-1)	Nessus	SuSE Local Security Checks	high
306697	openSUSE 15 Security Update : xwayland (SUSE-SU-2026:1329-1)	Nessus	SuSE Local Security Checks	high
306691	SUSE SLED15 / SLES15 Security Update : xorg-x11-server (SUSE-SU-2026:1330-1)	Nessus	SuSE Local Security Checks	high
306686	SUSE SLES15 Security Update : xorg-x11-server (SUSE-SU-2026:1335-1)	Nessus	SuSE Local Security Checks	high
306684	SUSE SLES15 Security Update : xorg-x11-server (SUSE-SU-2026:1333-1)	Nessus	SuSE Local Security Checks	high
306683	SUSE SLES15 / openSUSE 15 Security Update : xorg-x11-server (SUSE-SU-2026:1331-1)	Nessus	SuSE Local Security Checks	high
306639	FreeBSD : xwayland -- Multiple vulnerabilities (099423d1-3815-11f1-a284-589cfc10a551)	Nessus	FreeBSD Local Security Checks	critical
306631	FreeBSD : xorg-server -- Multiple vulnerabilities (7b6463c6-3813-11f1-a284-589cfc10a551)	Nessus	FreeBSD Local Security Checks	critical
306466	Slackware Linux 15.0 / current xorg-server Multiple Vulnerabilities (SSA:2026-104-02)	Nessus	Slackware Local Security Checks	critical
306420	Linux Distros Unpatched Vulnerability : CVE-2026-34001	Nessus	Misc.	critical

Detections

Analytics

CVE-2026-34001

high

Tenable Plugins

high

high

high

high

high

high

high

critical

critical

critical

critical