ZeroHour

Search: “Xen Project”

2 stories

Xen Security Advisory 510 v3 (CVE-2026-79602) - x86: improper handling of HVM emulation return codes

Xen Project released XSA-510 (CVE-2026-79602) fixing mishandled HVM emulation return codes that let PCI-passthrough guests crash Xen.

Xen Security Advisory 510 v3 publicly discloses CVE-2026-79602, improper handling of HVM emulation return codes in the Xen hypervisor on x86. A guest with an assigned PCI device that has at least one BAR in the IO port space can trigger a BUG() in Xen. The advisory was released publicly as version 3.

Xen Security Advisory 509 v3 (CVE-2026-62437) - x86: DMs may cause mem leak by IRQ binding

Xen Project released XSA-509 (CVE-2026-62437) fixing a memory leak in IRQ tracking when guests with assigned PCI devices are terminated.

Xen Security Advisory 509 v3 publicly discloses CVE-2026-62437, a memory leak affecting the Xen hypervisor on x86. When guests are terminated, cleanup of PCI devices assigned to those guests and removal of associated IRQ tracking structures may fail, leaking memory. The advisory was released publicly as version 3.

oss-security · 8d agoVulnerabilityCVE-2026-62437