CVE-2026-62432

The CVE describes a race in the Xen EVTCHNOP_expand_array hypercall: it checks FIFO event channels without the correct lock, allowing a race with EVTCHNOP_reset that can lead to dereferencing a NULL pointer. Affected component: Xen hypervisor’s EVTCHNOP_expand_array path. Impact is a NULL derefer...