PT-2026-111665
CVE-2026-79609
·
Published
2026-10-13
·
Updated
2026-11-09
Description by
CVSS 3.1
8.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
xen versions prior to 4.22.0 06-1.1
Description
Xen Page Table Isolation (XPTI) is used to mitigate Meltdown by copying 64-bit PV guest page table entries from guest-chosen root page tables to the Xen-chosen one used by hardware. The directmap is utilized to read the guest root page table. However, PV guests may have a directmap that does not cover all memory, specifically when memory extends beyond the 5 TiB (or 3.5 TiB if CONFIG BIGMEM=y) address boundary.
Recommendations
Update to version 4.22.0 06-1.1.
Found an issue in the description? Have something to add? Feel free to write us 👾