CVE-2026-62430

Name of the Vulnerable Software and Affected Versions Xen (affected versions not specified)

Description Accesses to the CMOS memory contents are performed using an indirect IO port pair. Xen caches the index chosen by the guest, but a specific usage of this index lacks the necessary locking to prevent concurrent changes. This allows a guest to modify the index after it has been validated, leading to an out-of-bound read access to an array's contents.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.