Xen guest can double-unmap memory in Linux xen-netback (CVE-2026-99287)
Illegal ring indexes during frontend setup make cleanup unmap connection resources twice; no fix or attacks are stated.
4 stories, newest first · one card per story
Illegal ring indexes during frontend setup make cleanup unmap connection resources twice; no fix or attacks are stated.
XSA-529 version 2 is the public release of an issue in the bearer token that authenticates hosts in a Xen pool.
Xen Project released XSA-511 (CVE-2026-79603) fixing missing TLB flushes before page scrubbing that can leak x86 PV guest data.
Xen Project released XSA-509 (CVE-2026-62437) fixing a memory leak in IRQ tracking when guests with assigned PCI devices are terminated.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views