[CVE-2026-102701 ] Published: Oct 13, 2026, 2:47:34 PM UTC
xen: CVE-2026-102701
Medium Afetada Detalhes (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
Afetada
dsa · xen · debian · bookworm; pypi · xen · debian · 12
4.17.5+72-g01140da4e8-1 · arm64 · bookworm
Afetada
dsa · xen · debian · bookworm; pypi · xen · debian · 12
[CVE-2026-79604 ] Published: Sep 8, 2026, 8:47:33 PM UTC
xen: CVE-2026-79604
Medium Afetada Detalhes (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
Afetada
dsa · xen · debian · bookworm; pypi · xen · debian · 12
4.17.5+72-g01140da4e8-1 · arm64 · bookworm
Afetada
dsa · xen · debian · bookworm; pypi · xen · debian · 12
[CVE-2026-62425 ] Published: Jul 28, 2026, 1:19:01 PM UTC
[This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities correspond to which CVE.]
The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 drive
High(8.1) Afetada Detalhes (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
Afetada · Corrigida: 4.17.7-0+deb12u1
nvd · xen · debian · bookworm; pypi · xen · debian · 12
4.17.5+72-g01140da4e8-1 · arm64 · bookworm
Afetada · Corrigida: 4.17.7-0+deb12u1
nvd · xen · debian · bookworm; pypi · xen · debian · 12
[CVE-2026-62424 ] Published: Jul 28, 2026, 1:19:01 PM UTC
[This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities correspond to which CVE.]
The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 drive
High(8.1) Afetada Detalhes (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
Afetada · Corrigida: 4.17.7-0+deb12u1
nvd · xen · debian · bookworm; pypi · xen · debian · 12
4.17.5+72-g01140da4e8-1 · arm64 · bookworm
Afetada · Corrigida: 4.17.7-0+deb12u1
nvd · xen · debian · bookworm; pypi · xen · debian · 12
[CVE-2026-62423 ] Published: Jul 28, 2026, 1:19:01 PM UTC
[This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities correspond to which CVE.]
The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 drive
High(8.1) Afetada Detalhes (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
Afetada · Corrigida: 4.17.7-0+deb12u1
nvd · xen · debian · bookworm; pypi · xen · debian · 12
4.17.5+72-g01140da4e8-1 · arm64 · bookworm
Afetada · Corrigida: 4.17.7-0+deb12u1
nvd · xen · debian · bookworm; pypi · xen · debian · 12
[CVE-2026-42495 ] Published: Jul 28, 2026, 1:18:32 PM UTC
[This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities correspond to which CVE.]
The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 drive
High(8.1) Afetada Detalhes (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
Afetada · Corrigida: 4.17.7-0+deb12u1
nvd · xen · debian · bookworm; pypi · xen · debian · 12
4.17.5+72-g01140da4e8-1 · arm64 · bookworm
Afetada · Corrigida: 4.17.7-0+deb12u1
nvd · xen · debian · bookworm; pypi · xen · debian · 12
[CVE-2026-42494 ] Published: Jul 28, 2026, 1:18:32 PM UTC
[This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities correspond to which CVE.]
The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 drive
High(8.1) Afetada Detalhes (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
Afetada · Corrigida: 4.17.7-0+deb12u1
nvd · xen · debian · bookworm; pypi · xen · debian · 12
4.17.5+72-g01140da4e8-1 · arm64 · bookworm
Afetada · Corrigida: 4.17.7-0+deb12u1
nvd · xen · debian · bookworm; pypi · xen · debian · 12
[CVE-2026-79607 ] Published: Oct 13, 2026, 4:17:22 PM UTC
xen: CVE-2026-79607
High(7.5) Desconhecido Detalhes (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
Desconhecido
Version impact unknown
dsa · xen · debian · bookworm
4.17.5+72-g01140da4e8-1 · arm64 · bookworm
Desconhecido
Version impact unknown
dsa · xen · debian · bookworm
[CVE-2026-102702 ] Published: Oct 13, 2026, 4:17:09 PM UTC
xen: CVE-2026-102702
High(7.5) Desconhecido Detalhes (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
Desconhecido · Corrigida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
dsa · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
4.17.5+72-g01140da4e8-1 · arm64 · bookworm
Desconhecido · Corrigida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
dsa · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
[CVE-2026-102699 ] Published: Oct 13, 2026, 3:45:13 PM UTC
xen: CVE-2026-102699
High(7.5) Desconhecido Detalhes (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
Desconhecido · Corrigida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
dsa · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
4.17.5+72-g01140da4e8-1 · arm64 · bookworm
Desconhecido · Corrigida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
dsa · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
[CVE-2026-79608 ] Published: Oct 13, 2026, 3:44:08 PM UTC
xen: CVE-2026-79608
Critical(9.8) Desconhecido Detalhes (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
Desconhecido · Corrigida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
dsa · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
4.17.5+72-g01140da4e8-1 · arm64 · bookworm
Desconhecido · Corrigida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
dsa · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
[CVE-2026-102700 ] Published: Oct 13, 2026, 1:09:06 PM UTC
xen: CVE-2026-102700
Medium(4.7) Desconhecido Detalhes (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
Desconhecido · Corrigida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
dsa · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
4.17.5+72-g01140da4e8-1 · arm64 · bookworm
Desconhecido · Corrigida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
dsa · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
[CVE-2026-79609 ] Published: Oct 13, 2026, 1:09:06 PM UTC
xen: CVE-2026-79609
High(8.8) Desconhecido Detalhes (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
Desconhecido · Corrigida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
dsa · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
4.17.5+72-g01140da4e8-1 · arm64 · bookworm
Desconhecido · Corrigida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
dsa · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
[CVE-2026-79610 ] Published: Oct 13, 2026, 1:09:06 PM UTC
xen: CVE-2026-79610
High(8.8) Desconhecido Detalhes (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
Desconhecido · Corrigida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
dsa · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
4.17.5+72-g01140da4e8-1 · arm64 · bookworm
Desconhecido · Corrigida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
dsa · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
[CVE-2026-79611 ] Published: Oct 13, 2026, 1:09:06 PM UTC
xen: CVE-2026-79611
Medium(5.5) Desconhecido Detalhes (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
Desconhecido · Corrigida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
dsa · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
4.17.5+72-g01140da4e8-1 · arm64 · bookworm
Desconhecido · Corrigida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
dsa · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
[CVE-2026-79603 ] Published: Sep 8, 2026, 12:11:21 PM UTC
x86 PV guests can free memory pages while still keeping a stale TLB entry
pointing to them. A TLB flush is only issued by Xen (if needed) when the
page is re-used. Since it's possible for the page t
High(8.4) Desconhecido Detalhes (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
Desconhecido · Corrigida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
nvd · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
4.17.5+72-g01140da4e8-1 · arm64 · bookworm
Desconhecido · Corrigida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
nvd · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
[CVE-2026-79602 ] Published: Sep 8, 2026, 12:11:08 PM UTC
A guest with a PCI device assigned that has at least a BAR on the IO port
space can trigger a BUG() in Xen.
High(8.8) Desconhecido Detalhes (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
Desconhecido · Corrigida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
nvd · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
4.17.5+72-g01140da4e8-1 · arm64 · bookworm
Desconhecido · Corrigida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
nvd · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
[CVE-2026-62437 ] Published: Sep 8, 2026, 12:10:52 PM UTC
When guests are terminated, various pieces of cleanup need carrying out.
The cleaning up of PCI devices which were assigned to guests, and the
associated removal of tracking structures for IRQs used b
Medium(6.5) Desconhecido Detalhes (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
Desconhecido · Corrigida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
nvd · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
4.17.5+72-g01140da4e8-1 · arm64 · bookworm
Desconhecido · Corrigida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
nvd · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
[CVE-2026-62434 ] Published: Jul 28, 2026, 12:33:08 PM UTC
A guest started with Populated on Demand enabled (PoD) can attempt to
reclaim pages which aren't regular guest RAM. This can cause corruption
of memory management state in Xen.
High(7.3) Desconhecido Detalhes (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
Desconhecido · Corrigida: 4.17.7-0+deb12u1, 4.20.3+127-gc42374a105-0+deb13u1, 4.20.3+127-gc42374a105-1
Version impact unknown
nvd · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
4.17.5+72-g01140da4e8-1 · arm64 · bookworm
Desconhecido · Corrigida: 4.17.7-0+deb12u1, 4.20.3+127-gc42374a105-0+deb13u1, 4.20.3+127-gc42374a105-1
Version impact unknown
nvd · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
[CVE-2026-62433 ] Published: Jul 28, 2026, 12:32:59 PM UTC
Parts of the DM_OP handling code assumes the caller has provided the
required number of buffers for the given operation without any checking
being done. As a result, certain operations might access s
Medium(6.5) Desconhecido Detalhes (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
Desconhecido · Corrigida: 4.17.7-0+deb12u1, 4.20.3+127-gc42374a105-0+deb13u1, 4.20.3+127-gc42374a105-1
Version impact unknown
nvd · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
4.17.5+72-g01140da4e8-1 · arm64 · bookworm
Desconhecido · Corrigida: 4.17.7-0+deb12u1, 4.20.3+127-gc42374a105-0+deb13u1, 4.20.3+127-gc42374a105-1
Version impact unknown
nvd · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
