PT-2026-111666

CVE-2026-79610

·

Published

2026-10-13

·

Updated

2026-11-09

Description by

CVSS 3.1
8.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions xen versions prior to 4.22.0 06-1.1
Description A race condition occurs during grant table operations when transitioning between v1 and v2. Specifically, a sequence of v2 to v1 and then back to v2 changes can cause status pages to be freed and subsequently reallocated. This process may result in the status pages being assigned different addresses, which leads to the use of stale pointers within the status array.
Recommendations Update to version 4.22.0 06-1.1.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
OPENSUSE-SU-2026:12138-1
SUSE-SU-2026:4641-1
SUSE-SU-2026:4642-1
SUSE-SU-2026:4732-1
SUSE-SU-2026:4942-1
SUSE-SU-2026:5140-1
Found an issue in the description? Have something to add? Feel free to write us 👾