DEBIAN-CVE-2026-79602

A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG in Xen...

ALPINE-CVE-2026-79602

A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG in Xen...

CVE-2026-79602

A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG in Xen...

CVE-2026-79602

A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG in Xen...

EUVD-2026-72720

A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG in Xen...

CVE-2026-79602 x86: improper handling of HVM emulation return codes

A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG in Xen...

CVE-2026-79602: Improper Restriction of Operations within the Bounds of a Memory Buffer

A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG in Xen...

PT-2026-87051

These are all security issues fixed in the xen-4.22.0 04-1.1 package on the GA media of openSUSE Tumbleweed...

Linux Distros Unpatched Vulnerability : CVE-2026-79602

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG in Xen. CVE-2026-79602 Note that Nessus relies on the presence...

ALPINE-CVE-2026-62430

Accesses to the CMOS memory contents are done using an indirect IO port pair. Therefore Xen needs to cache the guest chosen index, and one of the usages of the index didn't take the necessary locking to avoid concurrent changes. As a result, a guest could change the index after it being checked,...

CVE-2026-62430

Accesses to the CMOS memory contents are done using an indirect IO port pair. Therefore Xen needs to cache the guest chosen index, and one of the usages of the index didn't take the necessary locking to avoid concurrent changes. As a result, a guest could change the index after it being checked,...

CVE-2026-62430

Accesses to the CMOS memory contents are done using an indirect IO port pair. Therefore Xen needs to cache the guest chosen index, and one of the usages of the index didn't take the necessary locking to avoid concurrent changes. As a result, a guest could change the index after it being checked,...

CVE-2026-62430 x86: Out-of-bounds read in vRTC emulation

Accesses to the CMOS memory contents are done using an indirect IO port pair. Therefore Xen needs to cache the guest chosen index, and one of the usages of the index didn't take the necessary locking to avoid concurrent changes. As a result, a guest could change the index after it being checked,...

CVE-2026-62430: Concurrent Execution using Shared Resource with Improper Synchronization

Accesses to the CMOS memory contents are done using an indirect IO port pair. Therefore Xen needs to cache the guest chosen index, and one of the usages of the index didn't take the necessary locking to avoid concurrent changes. As a result, a guest could change the index after it being checked,...

PT-2026-65472

Accesses to the CMOS memory contents are done using an indirect IO port pair. Therefore Xen needs to cache the guest chosen index, and one of the usages of the index didn't take the necessary locking to avoid concurrent changes. As a result, a guest could change the index after it being checked,...

CVE-2026-57851

MSI Feature Manager contains a local privilege escalation via the KernCoreLib64.sys kernel driver. An attacker with local access can use exposed IOCTL handlers to perform arbitrary physical memory read/write and unrestricted I/O port operations without administrator privileges. This can enable ma...

EUVD-2026-42053

MSI Feature Manager contains a local privilege escalation vulnerability in the KernCoreLib64.sys kernel driver that allows any locally logged-on user to perform arbitrary physical memory read/write and unrestricted I/O port operations by accessing exposed IOCTL handlers without administrator...

SUSE-SU-2026:2668-1 Security update for xen

This update for xen fixes the following issues: - CVE-2026-42487: xen: x86 HVM I/O port list traversal XSA-491 bsc1266952. - CVE-2026-42488: xen: x86: mismatched mapcache metadata XSA-494 bsc1266955. - CVE-2026-42489,CVE-2026-42490: xen: domctl lock open to abuse XSA-492 bsc1266953...

SUSE-SU-2026:2613-1 Security update for xen

This update for xen fixes the following issues - CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption bsc1264066. - CVE-2026-42487: x86 HVM I/O port list traversal bsc1266952. - CVE-2026-42488: x86: mismatched mapcache metadata bsc1266955. - CVE-2026-42489,CVE-2026-42490: domctl lock open to abus...

CVE-2026-42487

HVM guest I/O port accesses are subject to either emulation or at least translation. Translations are managed by the device model via XENDOMCTLioportmapping, and hence the linked list used may changed at any time. Traversal of those lists while handling guest I/O port accesses therefore needs...