8.8
High
CVE-2026-79610 XSA-501 was about issues with v1 -> v2 and v2 -> v1 changes racing certain other grant table operations
Description
XSA-501 was about issues with v1 -> v2 and v2 -> v1 changes racing certain other grant table operations. Sadly a v2 -> v1 -> v2 change has yet another effect which wasn't accounted for: During the first change, status pages would be freed. During the second change they would be allocated again. Hence across the full pair of change the addresses of the status pages may change, rendering stale previously calculated pointers into the status array.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| xen | Versions not published |
Other CVEs of xen
The 142 CVEs of xen →
CVE-2026-102703
arbitrary read/write via grant copy
4.4
Medium
CVE-2026-102704
arbitrary read/write via grant copy
4.4
Medium
CVE-2026-102700
With its original introduction, GNTTAB_cache_flush was made available
uniformly
4.7
Medium
CVE-2026-102702
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to…
7.5
High