4.3
Moyenne
CVE-2026-79603 x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to them
Description
x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to them. A TLB flush is only issued by Xen (if needed) when the page is re-used. Since it's possible for the page to be scrubbed ahead of the TLB flush, there's a window where a PV guest can modify an already scrubbed page.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| xen | Versions non publiées |
Autres CVE de xen
Les 142 CVE de xen →
CVE-2026-102704
arbitrary read/write via grant copy
4.4
Moyenne
CVE-2026-102703
arbitrary read/write via grant copy
4.4
Moyenne
CVE-2026-102700
With its original introduction, GNTTAB_cache_flush was made available
uniformly
4.7
Moyenne
CVE-2026-102702
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to…
7.5
Élevée