Xen

Search everything

Mentions · 7d0
Mentions · 30d0
All mentions6
First seenSep 8, 2026
Last mentionedOct 5, 2026

Timeline

6 articles · newest first

Re: cloud computing provider disclosures

oss-security reply says Xen, KVM, QEMU, and Cloud Hypervisor already have separate disclosure processes.

oss-securityOct 5, 00:07 UTC · Oct 5, 2026Industry2 · 1 read

Xen Security Advisory 513 v3 (CVE-2026-79605,CVE-2026-79606) - Out-of-bounds accesses in Tapdisk

Xen published XSA-513 (CVE-2026-79605 and CVE-2026-79606): incorrect bounds checks in Tapdisk, the XAPI toolstack userspace xen-blkback, allow out-of-bounds accesses.

oss-securitySep 8, 15:44 UTC · Sep 8, 2026Vulnerability 4 sourcesCVE-2026-79605 CVE-2026-796062 · 1 read

Xen Security Advisory 512 v3 (CVE-2026-79604) - oxenstored: Unbounded accumulation of watches

Xen Project released XSA-512 (CVE-2026-79604) fixing unbounded accumulation of watches in oxenstored that can exhaust resources after xenbus reconnects.

oss-securitySep 8, 15:42 UTC · Sep 8, 2026Vulnerability 4 sourcesCVE-2026-796042 · 1 read

Xen Security Advisory 511 v3 (CVE-2026-79603) - Unconditionally do TLB flushing ahead of page scrubbing

Xen Project released XSA-511 (CVE-2026-79603) fixing missing TLB flushes before page scrubbing that can leak x86 PV guest data.

oss-securitySep 8, 15:39 UTC · Sep 8, 2026Vulnerability 4 sourcesCVE-2026-796032 · 1 read

Xen Security Advisory 510 v3 (CVE-2026-79602) - x86: improper handling of HVM emulation return codes

Xen Project released XSA-510 (CVE-2026-79602) fixing mishandled HVM emulation return codes that let PCI-passthrough guests crash Xen.

oss-securitySep 8, 15:37 UTC · Sep 8, 2026Vulnerability 4 sourcesCVE-2026-796022

Xen Security Advisory 509 v3 (CVE-2026-62437) - x86: DMs may cause mem leak by IRQ binding

Xen Project released XSA-509 (CVE-2026-62437) fixing a memory leak in IRQ tracking when guests with assigned PCI devices are terminated.

oss-securitySep 8, 15:35 UTC · Sep 8, 2026VulnerabilityCVE-2026-624371 · 1 read

Related CVEs

by mentions

CVE-2026-79602<1%8.8
Guest-triggerable hypervisor DoS in Xen via PCI passthrough I/O port BARs
published Sep 8, 2026Xen Project Xen hypervisor (x86) — HVM guests with PCI device assignment where the assigned device has a BAR in I/O port space
CVE-2026-62437<1%6.5
Memory leak in Xen hypervisor x86 IRQ tracking during guest teardown with PCI passthrough
published Sep 8, 2026Xen Project (security@xen.org CNA) Xen hypervisor, x86 hosts using PCI device passthrough with a device model
CVE-2026-79603<1%4.3
Stale TLB Entry Flaw in Xen Hypervisor Lets x86 PV Guests Modify Scrubbed Pages
published Sep 8, 2026Xen Project Xen hypervisor (x86, with paravirtualized/PV guests)
CVE-2026-79604—
published —
CVE-2026-79606—
published —
CVE-2026-79605—
published —

Appears with

Xen Projectorganization · 5
Xen Projectvendor · 5
Cloud Hypervisorproduct · 1
oxenstoredproduct · 1
XAPIproduct · 1
Tapdiskproduct · 1
KVMproduct · 1
Firecrackerproduct · 1
QEMUproduct · 1
Linux kernelproduct · 1

Entities are extracted by the model from each article. First seen Sep 8, 2026, last mentioned Oct 5, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.