8.8
Élevée
CVE-2026-79610 XSA-501 was about issues with v1 -> v2 and v2 -> v1 changes racing certain other grant table operations
Description
XSA-501 was about issues with v1 -> v2 and v2 -> v1 changes racing certain other grant table operations. Sadly a v2 -> v1 -> v2 change has yet another effect which wasn't accounted for: During the first change, status pages would be freed. During the second change they would be allocated again. Hence across the full pair of change the addresses of the status pages may change, rendering stale previously calculated pointers into the status array.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| xen | Versions non publiées |
Autres CVE de xen
Les 142 CVE de xen →
CVE-2026-102704
arbitrary read/write via grant copy
4.4
Moyenne
CVE-2026-102703
arbitrary read/write via grant copy
4.4
Moyenne
CVE-2026-102700
With its original introduction, GNTTAB_cache_flush was made available
uniformly
4.7
Moyenne
CVE-2026-102702
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to…
7.5
Élevée