CVE-2026-62429

The Xen hypervisor is vulnerable to a race condition where vNUMA domain cleanup is not synchronized with its retrieval by a device model controlling a guest. This allows access to vNUMA configuration data of a guest even after domain destruction has commenced. Impact includes potential privilege ...

CVE-2026-42487

HVM guest I/O port accesses are subject to either emulation or at least translation. Translations are managed by the device model via XENDOMCTLioportmapping, and hence the linked list used may changed at any time. Traversal of those lists while handling guest I/O port accesses therefore needs...