CVE-2026-79603

Name of the Vulnerable Software and Affected Versions Xen (affected versions not specified)

Description x86 PV guests can free memory pages while maintaining a stale TLB (Translation Lookaside Buffer) entry pointing to them. A TLB flush is only issued by Xen when the page is re-used. Because a page can be scrubbed before the TLB flush occurs, a window exists where a PV guest can modify a page that has already been scrubbed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.