XEN vulnerabilities
153 CVEs and advisories name XEN as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-102704arbitrary read/write via grant copy
- CVE-2026-102703arbitrary read/write via grant copy
- CVE-2026-102700gnttab: cache-flush handling may cause page reference leak
- CVE-2026-102702Arm: multiple issues with GNTTABOP_cache_flush
- CVE-2026-102699Arm: multiple issues with GNTTABOP_cache_flush
- CVE-2026-79611VMX: VMentry failure with branch tracing and blocked states
- CVE-2026-79610grant-table: double version change race
- CVE-2026-79609x86: XPTI may break on huge-memory systems
- CVE-2026-79608x86/AMD: ineffectual Zenbleed workaround
- CVE-2026-79607Xenstore: Guests can crash xenstored during Live Update
- CVE-2026-79603Unconditionally do TLB flushing ahead of page scrubbing
- CVE-2026-79602x86: improper handling of HVM emulation return codes
- CVE-2026-62437x86: DMs may cause mem leak by IRQ binding
- CVE-2026-62434PoD: Don't try to reclaim special pages
- CVE-2026-62433correct buffer checks for DM_OP hypercalls
- CVE-2026-62432evtchn: Race between FIFO expand and reset
- CVE-2026-62431Viridian STIMER division by zero
- CVE-2026-62430x86: Out-of-bounds read in vRTC emulation
- CVE-2026-62429vNUMA domain cleanup may race other operations
- CVE-2026-62436grant-table: version change racing with other operations
- CVE-2026-62435grant-table: version change racing with other operations
- CVE-2026-62428grant-table: type confusion in grant-copy
- CVE-2026-62427sysctl and platform-op locks open to abuse
- CVE-2026-62426sysctl and platform-op locks open to abuse
- CVE-2026-62425buffer overruns in libfsimage iso9660 handling
- CVE-2026-62424buffer overruns in libfsimage iso9660 handling
- CVE-2026-62423buffer overruns in libfsimage iso9660 handling
- CVE-2026-42495buffer overruns in libfsimage iso9660 handling
- CVE-2026-42494buffer overruns in libfsimage iso9660 handling
- CVE-2026-42492vIRQ event channel binding may break Xenstore