7.3
High
CVE-2026-62432 The EVTCHNOP_expand_array hypercall checks for whether FIFO event channels are enabled, but without holding the…
Description
The EVTCHNOP_expand_array hypercall checks for whether FIFO event channels are enabled, but without holding the correct lock. It can race with EVTCHNOP_reset, resulting in dereferencing a NULL pointer.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| xen | Versions not published |
Other CVEs of xen
The 142 CVEs of xen →
CVE-2026-102703
arbitrary read/write via grant copy
4.4
Medium
CVE-2026-102704
arbitrary read/write via grant copy
4.4
Medium
CVE-2026-102700
With its original introduction, GNTTAB_cache_flush was made available
uniformly
4.7
Medium
CVE-2026-102702
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to…
7.5
High