Skip to content
OpenAdvisories
High WID-SEC-2026-3930 8 CVEs

Xen: Mehrere Schwachstellen

Published Oct 13, 2026 · Updated Nov 9, 2026 · Revision 9 · de

Vendor: Debian Vendor: Fedora Vendor: SUSE Product: Linux Product: Linux Product: Linux Product: openSUSE

Summary

Ein Angreifer kann mehrere Schwachstellen in Xen ausnutzen, um beliebigen Code – möglicherweise sogar mit Root-Rechten – auszuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder offenzulegen oder einen Denial-of-Service-Zustand auszulösen.

Product

Xen ist ein Virtueller-Maschinen-Monitor (VMM), der Hardware (x86, IA-64, PowerPC) für die darauf laufenden Systeme (Domains) paravirtualisiert.

Vulnerabilities 8

  • Critical 9.8
    CVE-2026-79608

    x86/AMD: ineffectual Zenbleed workaround

    The workaround for XSA-433 (Zenbleed, CVE-2023-20593) was later re-worked to better integrate with other manipulations of the same MSR. In this rework an inverted conditional was introduced, resulting in the workaround to not be applied when needed and vice v…

    Xen Xen xen xen Virtualization Debian Ubuntu Alpine
  • High 8.8
    CVE-2026-79609

    x86: XPTI may break on huge-memory systems

    XPTI (Xen Page Table Isolation) was introduced to mitigate Meltdown (CVE-2017-5754, one aspect of XSA-254). This involves copying 64-bit PV guest page table entries from guest-chosen root page tables to the Xen- chosen one which is in actual use by hardware. …

    Xen Xen xen xen Virtualization Debian Ubuntu Alpine
  • High 8.8
    CVE-2026-79610

    grant-table: double version change race

    XSA-501 was about issues with v1 -> v2 and v2 -> v1 changes racing certain other grant table operations. Sadly a v2 -> v1 -> v2 change has yet another effect which wasn't accounted for: During the first change, status pages would be freed. During the second c…

    Xen Xen xen xen Virtualization Debian Ubuntu Alpine
  • High 7.5
    CVE-2026-102699

    Arm: multiple issues with GNTTABOP_cache_flush

    [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] 1) XSA-437 (CVE-2023-34321) addressed issues with overflows in calculations involved in guests flushing caches through GNTTABOP_ca…

    Xen Xen xen xen Virtualization Debian Ubuntu Alpine
  • High 7.5
    CVE-2026-102702

    Arm: multiple issues with GNTTABOP_cache_flush

    [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] 1) XSA-437 (CVE-2023-34321) addressed issues with overflows in calculations involved in guests flushing caches through GNTTABOP_ca…

    Xen Xen xen xen Virtualization Debian Ubuntu
  • Medium 5.5
    CVE-2026-79607

    Xenstore: Guests can crash xenstored during Live Update

    During Xenstore live update the state record for a Xenstore watch with specified watch depth is written with two bytes missing. This results in an inconsistent state when reading the state back in the new Xenstore, causing a crash of Xenstore or wrong Xenstor…

    Xen Xen xen xen Virtualization Debian Ubuntu
  • Medium 5.5
    CVE-2026-79611

    VMX: VMentry failure with branch tracing and blocked states

    For XSA-308 logic was introduced, as VMX VMEntry checks do not like the exact combination of state which occurs when #DB in intercepted, Single Stepping is active, and blocked by STI/MovSS is active, despite this being a legitimate state to be in. The resulti…

    Xen Xen xen xen Virtualization Debian Ubuntu Alpine
  • Medium 4.7
    CVE-2026-102700

    gnttab: cache-flush handling may cause page reference leak

    With its original introduction, GNTTAB_cache_flush was made available uniformly. XSA-232 (CVE-2017-14318) then covered an omitted NULL pointer check, yet the addition of that check failed to adjust the subsequent error path. That error path fails to drop a pa…

    Xen Xen xen xen Virtualization Debian Ubuntu Alpine

Revision history

  1. #9

    Neue Updates von SUSE aufgenommen

  2. #8

    Neue Updates von Fedora aufgenommen

  3. #7

    Neue Updates von Debian aufgenommen

  4. #6

    Neue Updates von Fedora aufgenommen

  5. #5

    Neue Updates von SUSE aufgenommen

  6. #4

    Neue Updates von openSUSE aufgenommen

  7. #3

    Neue Updates von Fedora und SUSE aufgenommen

  8. #2

    Neue Updates von Debian aufgenommen

  9. #1

    Initiale Fassung

References