Skip to content
High-Priority CVE-2026-108094: Use-After-Free Flaw in Red Hat's Mutter

High-Priority CVE-2026-108094: Use-After-Free Flaw in Red Hat's Mutter

First seen 13 Oct 2026, 11:30 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 13, 2026 at 12:30 UTC
  • •CVE-2026-108094 is a high-severity use-after-free vulnerability in mutter.
  • •Local attackers can exploit this flaw to crash GNOME sessions or execute arbitrary code.
  • •Affected versions include mutter 47.0 to 50.4; patches are available in 50.5 and 51.0.

A use-after-free vulnerability (CVE-2026-108094) was discovered in the mutter compositor affecting Wayland sessions. This flaw allows a local attacker to exploit a race condition during the asynchronous reading of ICC files, potentially leading to crashes or arbitrary code execution within the compositor. The issue affects mutter versions from 47.0 to 50.4, with a fix available in versions 50.5 and 51.0. Users running GNOME Wayland sessions, especially on shared or developer systems, are particularly at risk. Red Hat advises against running untrusted applications in affected sessions and limiting access to the Wayland socket. The vulnerability was published on October 12, 2026, and has a CVSS score of 7.8, indicating a high severity level. Immediate action is recommended to mitigate risks until patches are applied.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-12
CVE-2026-108094 published
Red Hat disclosed a use-after-free vulnerability in mutter affecting Wayland sessions.
access.redhat.com
2026-10-13
Advisory issued
Red Hat advised users to avoid untrusted applications in affected sessions and limit Wayland socket access.
Redpacketsecurity

More articles in this cluster (2)

Following this threat?

Track CVE-2026-108094 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (5)

1 / 3

Common questions

Which systems are affected?
Desktops and workstations using GNOME Wayland sessions with mutter versions 47.0 to 50.4 are affected.
What is the recommended action?
Apply the vendor's fixed package promptly and avoid running untrusted applications in affected sessions.
What is the CVSS score for this vulnerability?
CVE-2026-108094 has a CVSS score of 7.8, indicating a high severity level.