CVE-2026-42486

A flaw was found in Xen. A virtual machine administrator vm-admin can set the VM.platform:hvmserial parameter, which should be restricted to the pool-admin role. This improper restriction allows the vm-admin to perform arbitrary file writes in dom0, potentially leading to system compromise...