CVE-2026-23557

CVE-2026-23557 affects xenstored. Any guest can crash xenstored by issuing XS_RESET_WATCHES within a transaction due to an assert(); behavior depends on NDEBUG (assert() disabled when NDEBUG is defined). Local attack vector with low privileges and no user interaction, resulting in a high availabi...

Xenstored DoS via XS_RESET_WATCHES command

ISSUE DESCRIPTION Any guest can cause xenstored to crash by issuing a XSRESETWATCHES command within a transaction due to an assert triggering. In case xenstored was built with NDEBUG defined nothing bad will happen, as assert is doing nothing in this case. Note that the default is not to define...