16992 matches found
CVE-2026-79610
XSA-501 was about issues with v1 - v2 and v2 - v1 changes racing certain other grant table operations. Sadly a v2 - v1 - v2 change has yet another effect which wasn't accounted for: During the first change, status pages would be freed. During the second change they would be allocated again. Hence...
CVE-2026-102702
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. 1 XSA-437 CVE-2023-34321 addressed issues with overflows in calculations involved in guests flushing caches through GNTTABOPcacheflush. Unfortunately the fix there...
CVE-2026-79609
XPTI Xen Page Table Isolation was introduced to mitigate Meltdown CVE-2017-5754, one aspect of XSA-254. This involves copying 64-bit PV guest page table entries from guest-chosen root page tables to the Xen- chosen one which is in actual use by hardware. To read the guest root page table, the...
CVE-2026-102702
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. 1 XSA-437 CVE-2023-34321 addressed issues with overflows in calculations involved in guests flushing caches through GNTTABOPcacheflush. Unfortunately the fix there...
CVE-2026-102702 Arm: multiple issues with GNTTABOP_cache_flush
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. 1 XSA-437 CVE-2023-34321 addressed issues with overflows in calculations involved in guests flushing caches through GNTTABOPcacheflush. Unfortunately the fix there...
CVE-2026-79610 grant-table: double version change race
XSA-501 was about issues with v1 - v2 and v2 - v1 changes racing certain other grant table operations. Sadly a v2 - v1 - v2 change has yet another effect which wasn't accounted for: During the first change, status pages would be freed. During the second change they would be allocated again. Hence...
CVE-2026-79610 grant-table: double version change race
XSA-501 was about issues with v1 - v2 and v2 - v1 changes racing certain other grant table operations. Sadly a v2 - v1 - v2 change has yet another effect which wasn't accounted for: During the first change, status pages would be freed. During the second change they would be allocated again. Hence...
CVE-2026-79610
The Xen hypervisor is vulnerable to a grant-table double version change race condition (CWE-362). When performing a v2 -> v1 -> v2 change, status pages are freed during the first transition and re-allocated during the second, causing stale pointers in the status array. This may result in pr...
EUVD-2026-98825
XPTI Xen Page Table Isolation was introduced to mitigate Meltdown CVE-2017-5754, one aspect of XSA-254. This involves copying 64-bit PV guest page table entries from guest-chosen root page tables to the Xen- chosen one which is in actual use by hardware. To read the guest root page table, the...
CVE-2026-90232
A flaw was found in the Linux kernel's Address Mapping Table AMT device handling. When an AMT device is configured across different network namespaces netns, unregistering the underlying network device can lead to a system hang. This occurs because the amtdeviceevent function does not correctly...
CVE-2026-90117
A flaw was found in the Linux kernel's NTFS filesystem driver. When reusing a free Master File Table MFT record, the driver fails to properly validate an offset value from the on-disk record. A local attacker could exploit this by creating a specially crafted file, leading to a use-after-free err...
Security update for xen
This update for xen fixes the following issues: CVE-2026-79609: x86: XPTI may break on huge-memory systems bsc1283321. CVE-2026-79610: grant-table: double version change race bsc1283322. CVE-2026-79611: VMX: VMentry failure with branch tracing and blocked states bsc1283323. CVE-2026-102700: gntta...
SUSE-SU-2026:4642-1 Security update for xen
This update for xen fixes the following issues: - CVE-2026-79609: x86: XPTI may break on huge-memory systems bsc1283321. - CVE-2026-79610: grant-table: double version change race bsc1283322. - CVE-2026-79611: VMX: VMentry failure with branch tracing and blocked states bsc1283323. - CVE-2026-10270...
Security update for xen
This update for xen fixes the following issues: Security issues fixed: CVE-2026-79609: x86: XPTI may break on huge-memory systems bsc1283321. CVE-2026-79610: grant-table: double version change race bsc1283322. CVE-2026-79611: VMX: VMentry failure with branch tracing and blocked states bsc1283323...
SUSE-SU-2026:4641-1 Security update for xen
This update for xen fixes the following issues: Security issues fixed: - CVE-2026-79609: x86: XPTI may break on huge-memory systems bsc1283321. - CVE-2026-79610: grant-table: double version change race bsc1283322. - CVE-2026-79611: VMX: VMentry failure with branch tracing and blocked states...
grant-table: double version change race
ISSUE DESCRIPTION XSA-501 was about issues with v1 - v2 and v2 - v1 changes racing certain other grant table operations. Sadly a v2 - v1 - v2 change has yet another effect which wasn't accounted for: During the first change, status pages would be freed. During the second change they would be...
Arm: multiple issues with GNTTABOP_cache_flush
ISSUE DESCRIPTION 1 XSA-437 CVE-2023-34321 addressed issues with overflows in calculations involved in guests flushing caches through GNTTABOPcacheflush. Unfortunately the fix there introduced a calculation which may underflow, resulting in a loop which would - at least on 64-bit Arm - take...
EUVD-2026-98179
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to modify the BOOTP table due to improper authorization...
