PT-2026-111666
CVE-2026-79610
·
Published
2026-10-13
·
Updated
2026-11-09
Description by
CVSS 3.1
8.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
xen versions prior to 4.22.0 06-1.1
Description
A race condition occurs during grant table operations when transitioning between v1 and v2. Specifically, a sequence of v2 to v1 and then back to v2 changes can cause status pages to be freed and subsequently reallocated. This process may result in the status pages being assigned different addresses, which leads to the use of stale pointers within the status array.
Recommendations
Update to version 4.22.0 06-1.1.
Found an issue in the description? Have something to add? Feel free to write us 👾