CVE-2026-79603

x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to them. A TLB flush is only issued by Xen if needed when the page is re-used. Since it's possible for the page to be scrubbed ahead of the TLB flush, there's a window where a PV guest can modify an already scrubbe...

CVE-2026-79603

Xen hypervisor x86 PV (para-virtualized) guests can free memory pages while retaining a stale TLB entry pointing to them. Xen issues a TLB flush only when a freed page is re-used , not at the time of freeing. Because the page can be scrubbed (zeroed or reassigned) before that TLB flush occurs, a ...

CVE-2026-79603 Unconditionally do TLB flushing ahead of page scrubbing

x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to them. A TLB flush is only issued by Xen if needed when the page is re-used. Since it's possible for the page to be scrubbed ahead of the TLB flush, there's a window where a PV guest can modify an already scrubbe...

EUVD-2026-72721

x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to them. A TLB flush is only issued by Xen if needed when the page is re-used. Since it's possible for the page to be scrubbed ahead of the TLB flush, there's a window where a PV guest can modify an already scrubbe...

Unconditionally do TLB flushing ahead of page scrubbing

ISSUE DESCRIPTION x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to them. A TLB flush is only issued by Xen if needed when the page is re-used. Since it's possible for the page to be scrubbed ahead of the TLB flush, there's a window where a PV guest can modify ...

Security update for xen

This update for xen fixes the following issues: Update to Xen 4.20.2 jscPED-8907. Security issues fixed: CVE-2025-58149: incorrect removal of permissions on PCI device unplug allows PV guests to access memory of devices no longer assigned to it XSA-476, bsc1252692. Other issues fixed: Failure to...

EUVD-2019-7758

Malware in sbrugna...

EUVD-2019-7759

Malware in sbrugna...

EUVD-2019-7755

Malware in sbrugna...

EUVD-2017-8724

Malware in sbrugna...

EUVD-2013-2056

Malware in sbrugna...

EUVD-2017-16965

Malware in sbrugna...

EUVD-2019-7754

Malware in sbrugna...

EUVD-2017-7045

Malware in sbrugna...

EUVD-2019-8190

Malware in sbrugna...

EUVD-2022-38847

Malicious code in bioql PyPI...

EUVD-2022-28145

Malicious code in bioql PyPI...

EUVD-2023-59726

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2022-23034

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A PV guest could DoS Xen while unmapping a grant To address XSA-380, reference counting was introduced for grant mappings for the case where a PV guest would ha...

Linux Distros Unpatched Vulnerability : CVE-2019-19583

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Xen through 4.12.x allowing x86 HVM/PVH guest OS users to cause a denial of service guest OS crash because VMX VMEntry checks mishand...