Xen Security Advisory 513 v3 (CVE-2026-79605,CVE-2026-79606) - Out-of-bounds accesses in Tapdisk
Xen published XSA-513 (CVE-2026-79605 and CVE-2026-79606): incorrect bounds checks in Tapdisk, the XAPI toolstack userspace xen-blkback, allow out-of-bounds accesses.
The Xen security team released XSA-513 version 3 as a public release, covering CVE-2026-79605 and CVE-2026-79606, out-of-bounds access flaws in Tapdisk. Tapdisk is the userspace xen-blkback implementation used by the XAPI toolstack. Several bounds checks were found to be incorrect, including a missing upper bounds check. The advisory was updated to version 3 for public release.
- XSA-513 issued for two CVEs affecting Tapdisk
- Tapdisk is the userspace xen-blkback implementation used by the XAPI toolstack
- Multiple incorrect bounds checks identified, including a missing upper bounds check
- Vendors
- Xen Project
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-79605 | — | — | — | ||
| CVE-2026-79606 | — | — | — |
From the original article
Posted by Xen . org security team on Sep 08 Xen Security Advisory CVE-2026-79605,CVE-2026-79606 / XSA-513 version 3 Out-of-bounds accesses in Tapdisk UPDATES IN VERSION 3 ==================== Public release. ISSUE DESCRIPTION ================= Tapdisk is a userspace xen-blkback implementation used by the XAPI toolstack.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.