[CVE-2026-102701 ] Published: Oct 13, 2026, 2:47:34 PM UTC
xen: CVE-2026-102701
Medium Afectada Detalles (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
Afectada
dsa · xen · debian · bookworm; pypi · xen · debian · 12
4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
Afectada
dsa · xen · debian · bookworm; pypi · xen · debian · 12
[CVE-2026-79604 ] Published: Sep 8, 2026, 8:47:33 PM UTC
xen: CVE-2026-79604
Medium Afectada Detalles (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
Afectada
dsa · xen · debian · bookworm; pypi · xen · debian · 12
4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
Afectada
dsa · xen · debian · bookworm; pypi · xen · debian · 12
[CVE-2026-62425 ] Published: Jul 28, 2026, 1:19:01 PM UTC
[This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities correspond to which CVE.]
The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 drive
High(8.1) Afectada Detalles (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
Afectada · Corregida: 4.17.7-0+deb12u1
nvd · xen · debian · bookworm; pypi · xen · debian · 12
4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
Afectada · Corregida: 4.17.7-0+deb12u1
nvd · xen · debian · bookworm; pypi · xen · debian · 12
[CVE-2026-62424 ] Published: Jul 28, 2026, 1:19:01 PM UTC
[This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities correspond to which CVE.]
The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 drive
High(8.1) Afectada Detalles (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
Afectada · Corregida: 4.17.7-0+deb12u1
nvd · xen · debian · bookworm; pypi · xen · debian · 12
4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
Afectada · Corregida: 4.17.7-0+deb12u1
nvd · xen · debian · bookworm; pypi · xen · debian · 12
[CVE-2026-62423 ] Published: Jul 28, 2026, 1:19:01 PM UTC
[This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities correspond to which CVE.]
The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 drive
High(8.1) Afectada Detalles (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
Afectada · Corregida: 4.17.7-0+deb12u1
nvd · xen · debian · bookworm; pypi · xen · debian · 12
4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
Afectada · Corregida: 4.17.7-0+deb12u1
nvd · xen · debian · bookworm; pypi · xen · debian · 12
[CVE-2026-42495 ] Published: Jul 28, 2026, 1:18:32 PM UTC
[This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities correspond to which CVE.]
The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 drive
High(8.1) Afectada Detalles (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
Afectada · Corregida: 4.17.7-0+deb12u1
nvd · xen · debian · bookworm; pypi · xen · debian · 12
4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
Afectada · Corregida: 4.17.7-0+deb12u1
nvd · xen · debian · bookworm; pypi · xen · debian · 12
[CVE-2026-42494 ] Published: Jul 28, 2026, 1:18:32 PM UTC
[This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities correspond to which CVE.]
The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 drive
High(8.1) Afectada Detalles (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
Afectada · Corregida: 4.17.7-0+deb12u1
nvd · xen · debian · bookworm; pypi · xen · debian · 12
4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
Afectada · Corregida: 4.17.7-0+deb12u1
nvd · xen · debian · bookworm; pypi · xen · debian · 12
[CVE-2026-23556 ] Published: Apr 28, 2026, 10:00:00 PM UTC
When oxenstored is tearing a domain down, the node data is cleaned up
but the usage counts are leaked.
When the domain ID is eventually reused, the new domain can create fewer
nodes before beeing dee
Critical(9.4) Afectada Detalles (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
Afectada · Corregida: 4.17.7-0+deb12u1
nvd · xen · debian · bookworm; pypi · xen · debian · 12
4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
Afectada · Corregida: 4.17.7-0+deb12u1
nvd · xen · debian · bookworm; pypi · xen · debian · 12
[CVE-2026-79607 ] Published: Oct 13, 2026, 4:17:22 PM UTC
xen: CVE-2026-79607
High(7.5) Desconocido Detalles (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
Desconocido
Version impact unknown
dsa · xen · debian · bookworm
4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
Desconocido
Version impact unknown
dsa · xen · debian · bookworm
[CVE-2026-102702 ] Published: Oct 13, 2026, 4:17:09 PM UTC
xen: CVE-2026-102702
High(7.5) Desconocido Detalles (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
Desconocido · Corregida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
dsa · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
Desconocido · Corregida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
dsa · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
[CVE-2026-102699 ] Published: Oct 13, 2026, 3:45:13 PM UTC
xen: CVE-2026-102699
High(7.5) Desconocido Detalles (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
Desconocido · Corregida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
dsa · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
Desconocido · Corregida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
dsa · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
[CVE-2026-79608 ] Published: Oct 13, 2026, 3:44:08 PM UTC
xen: CVE-2026-79608
Critical(9.8) Desconocido Detalles (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
Desconocido · Corregida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
dsa · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
Desconocido · Corregida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
dsa · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
[CVE-2026-102700 ] Published: Oct 13, 2026, 1:09:06 PM UTC
xen: CVE-2026-102700
Medium(4.7) Desconocido Detalles (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
Desconocido · Corregida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
dsa · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
Desconocido · Corregida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
dsa · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
[CVE-2026-79609 ] Published: Oct 13, 2026, 1:09:06 PM UTC
xen: CVE-2026-79609
High(8.8) Desconocido Detalles (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
Desconocido · Corregida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
dsa · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
Desconocido · Corregida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
dsa · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
[CVE-2026-79610 ] Published: Oct 13, 2026, 1:09:06 PM UTC
xen: CVE-2026-79610
High(8.8) Desconocido Detalles (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
Desconocido · Corregida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
dsa · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
Desconocido · Corregida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
dsa · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
[CVE-2026-79611 ] Published: Oct 13, 2026, 1:09:06 PM UTC
xen: CVE-2026-79611
Medium(5.5) Desconocido Detalles (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
Desconocido · Corregida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
dsa · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
Desconocido · Corregida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
dsa · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
[CVE-2026-79603 ] Published: Sep 8, 2026, 12:11:21 PM UTC
x86 PV guests can free memory pages while still keeping a stale TLB entry
pointing to them. A TLB flush is only issued by Xen (if needed) when the
page is re-used. Since it's possible for the page t
High(8.4) Desconocido Detalles (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
Desconocido · Corregida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
nvd · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
Desconocido · Corregida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
nvd · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
[CVE-2026-79602 ] Published: Sep 8, 2026, 12:11:08 PM UTC
A guest with a PCI device assigned that has at least a BAR on the IO port
space can trigger a BUG() in Xen.
High(8.8) Desconocido Detalles (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
Desconocido · Corregida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
nvd · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
Desconocido · Corregida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
nvd · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
[CVE-2026-62437 ] Published: Sep 8, 2026, 12:10:52 PM UTC
When guests are terminated, various pieces of cleanup need carrying out.
The cleaning up of PCI devices which were assigned to guests, and the
associated removal of tracking structures for IRQs used b
Medium(6.5) Desconocido Detalles (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
Desconocido · Corregida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
nvd · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
Desconocido · Corregida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
nvd · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
[CVE-2026-62434 ] Published: Jul 28, 2026, 12:33:08 PM UTC
A guest started with Populated on Demand enabled (PoD) can attempt to
reclaim pages which aren't regular guest RAM. This can cause corruption
of memory management state in Xen.
High(7.3) Desconocido Detalles (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
Desconocido · Corregida: 4.17.7-0+deb12u1, 4.20.3+127-gc42374a105-0+deb13u1, 4.20.3+127-gc42374a105-1
Version impact unknown
nvd · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
Desconocido · Corregida: 4.17.7-0+deb12u1, 4.20.3+127-gc42374a105-0+deb13u1, 4.20.3+127-gc42374a105-1
Version impact unknown
nvd · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
