CVE-2026-31787

XSA-487 / CVE-2026-31787 Linux 内核 Xenprivcmd 驱动中的双重释放漏洞 Linux 内核 Xen privcmd 驱动中存在的内核内存双重释放漏洞，可导致绕过内核锁定（安全启动）。利用该漏洞需要 root 级访问权限，这限制了其更广泛的安全影响。 | ---|--- 公告| XSA-487 CVE| CVE-2026-31787 组件| Linux 内核 — Xen privcmd 驱动 公开日期| 2026-04-28 发现者| Atharva Vartak @0xAth4rv...

Citrix-Virtual-Apps-XEN-Exploit

CVE-2024-xxxx Citrix Virtual Apps and Desktops XEN の未認証リモートコード実行 技術的な詳細については、ブログ記事 を参照してください。 https://github.com/user-attachments/assets/563fd110-5321-49f7-8dc3-48eb0a53e0f9 PoCの実行 python exploit-citrix-xen.py --target 192.168.1.120 --port 80 --cmd "whoami" / | | |\ \ \ / / \ \ / | | | | / \ /...

K000163507: Linux kernel vulnerability CVE-2026-31787

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: fix double free via VMA splitting privcmdvmops defines .close privcmdclose, but neither .maysplit nor .open. When userspace does a partial munmap on a privcmd mapping, the kernel splits...

ROS-20261001-73-0031

The vulnerability in Xen is related to the lack of checking for division by zero. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261001-73-0033

The vulnerability in Xen is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261001-73-0019

The vulnerability in Xen is related to improper handling of permissions. Exploiting this vulnerability can allow an attacker to increase their privileges...

Rocky Linux 9.6 [TuxCare] Security Update: kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1782155469)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1782155469 advisory. - In the Linux kernel, the following vulnerability has been resolved: udf: Fix preallocation discarding at indirect extent boundar...

Rocky Linux 8 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-abi-stablelists / etc Multiple Vulnerabilities (crlsa-2025_3893)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20253893 advisory. kernel: xen: Xen hypercall page unsafe against speculative attacks Xen Security Advisory 466 CVE-2024-53241 kernel: ALSA: usb-audio: Fix out of bounds read...

ROS-20261001-73-0035

The vulnerability in Xen is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261001-73-0038

The vulnerability in Xen is related to incorrect resource initialization. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261001-73-0036

The vulnerability in Xen is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261001-73-0032

The vulnerability in Xen is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

AlmaLinux 9.6 [TuxCare] Security Update: kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1782155469)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1782155469 advisory. - In the Linux kernel, the following vulnerability has been resolved: udf: Fix preallocation discarding at indirect extent boundary...

AlmaLinux 9.2 [TuxCare] Security Update: bpftool / kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1782151303)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1782151303 advisory. - In the Linux kernel, the following vulnerability has been resolved: netfilter: ebtables: fix memory leak when blob is malformed Th...

ROS-20261001-73-0037

The vulnerability in Xen is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260930-73-0100

The vulnerability of the xen/xen-scsiback.c component in the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

cve-2024-8069-exp-Citrix-Virtual-Apps-XEN

CVE-2024-8068 and CVE-2024-8069 Citrix 仮想アプリおよびデスクトップ XEN 未認証のリモートコード実行脆弱性 詳細な技術情報については、当社のブログ記事をご覧ください。 https://github.com/user-attachments/assets/563fd110-5321-49f7-8dc3-48eb0a53e0f9 エクスプロイトデモ python exploit-citrix-xen.py --target 192.168.1.120 --port 80 --cmd "whoami" CVE-xxxx-xxxxx.py Citrix...

ROS-20260929-73-0100

The vulnerability of the privcmdinit function in the drivers/xen/privcmd.c module of the Linux kernel is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

CVE-2026-98156

A flaw was found in the Linux kernel. This vulnerability can lead to information disclosure when running a Xen paravirtualized PV guest. The virtio graphics driver virtio-gpu fails to use the Direct Memory Access DMA interface to translate memory addresses for the display framebuffer, passing raw...

CVE-2026-98156

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use the DMA API for resource backing on Xen On a Xen PV domain page addresses bear no relation to the real machine addresses the host would have to use to reach it. virtioring.c handles this correctly, vringusemapapi...