[CVE-2026-102701 ] Published: Oct 13, 2026, 2:47:34 PM UTC
xen: CVE-2026-102701
Medium Afetada Detalhes (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
Afetada
dsa · xen · debian · bookworm; pypi · xen · debian · 12
4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
Afetada
dsa · xen · debian · bookworm; pypi · xen · debian · 12
[CVE-2026-79604 ] Published: Sep 8, 2026, 8:47:33 PM UTC
xen: CVE-2026-79604
Medium Afetada Detalhes (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
Afetada
dsa · xen · debian · bookworm; pypi · xen · debian · 12
4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
Afetada
dsa · xen · debian · bookworm; pypi · xen · debian · 12
[CVE-2026-62425 ] Published: Jul 28, 2026, 1:19:01 PM UTC
[This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities correspond to which CVE.]
The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 drive
High(8.1) Afetada Detalhes (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
Afetada · Corrigida: 4.17.7-0+deb12u1
nvd · xen · debian · bookworm; pypi · xen · debian · 12
4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
Afetada · Corrigida: 4.17.7-0+deb12u1
nvd · xen · debian · bookworm; pypi · xen · debian · 12
[CVE-2026-62424 ] Published: Jul 28, 2026, 1:19:01 PM UTC
[This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities correspond to which CVE.]
The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 drive
High(8.1) Afetada Detalhes (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
Afetada · Corrigida: 4.17.7-0+deb12u1
nvd · xen · debian · bookworm; pypi · xen · debian · 12
4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
Afetada · Corrigida: 4.17.7-0+deb12u1
nvd · xen · debian · bookworm; pypi · xen · debian · 12
[CVE-2026-62423 ] Published: Jul 28, 2026, 1:19:01 PM UTC
[This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities correspond to which CVE.]
The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 drive
High(8.1) Afetada Detalhes (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
Afetada · Corrigida: 4.17.7-0+deb12u1
nvd · xen · debian · bookworm; pypi · xen · debian · 12
4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
Afetada · Corrigida: 4.17.7-0+deb12u1
nvd · xen · debian · bookworm; pypi · xen · debian · 12
[CVE-2026-42495 ] Published: Jul 28, 2026, 1:18:32 PM UTC
[This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities correspond to which CVE.]
The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 drive
High(8.1) Afetada Detalhes (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
Afetada · Corrigida: 4.17.7-0+deb12u1
nvd · xen · debian · bookworm; pypi · xen · debian · 12
4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
Afetada · Corrigida: 4.17.7-0+deb12u1
nvd · xen · debian · bookworm; pypi · xen · debian · 12
[CVE-2026-42494 ] Published: Jul 28, 2026, 1:18:32 PM UTC
[This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities correspond to which CVE.]
The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 drive
High(8.1) Afetada Detalhes (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
Afetada · Corrigida: 4.17.7-0+deb12u1
nvd · xen · debian · bookworm; pypi · xen · debian · 12
4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
Afetada · Corrigida: 4.17.7-0+deb12u1
nvd · xen · debian · bookworm; pypi · xen · debian · 12
[CVE-2026-23556 ] Published: Apr 28, 2026, 10:00:00 PM UTC
When oxenstored is tearing a domain down, the node data is cleaned up
but the usage counts are leaked.
When the domain ID is eventually reused, the new domain can create fewer
nodes before beeing dee
Critical(9.4) Afetada Detalhes (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
Afetada · Corrigida: 4.17.7-0+deb12u1
nvd · xen · debian · bookworm; pypi · xen · debian · 12
4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
Afetada · Corrigida: 4.17.7-0+deb12u1
nvd · xen · debian · bookworm; pypi · xen · debian · 12
[CVE-2026-79607 ] Published: Oct 13, 2026, 4:17:22 PM UTC
xen: CVE-2026-79607
High(7.5) Desconhecido Detalhes (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
Desconhecido
Version impact unknown
dsa · xen · debian · bookworm
4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
Desconhecido
Version impact unknown
dsa · xen · debian · bookworm
[CVE-2026-102702 ] Published: Oct 13, 2026, 4:17:09 PM UTC
xen: CVE-2026-102702
High(7.5) Desconhecido Detalhes (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
Desconhecido · Corrigida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
dsa · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
Desconhecido · Corrigida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
dsa · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
[CVE-2026-102699 ] Published: Oct 13, 2026, 3:45:13 PM UTC
xen: CVE-2026-102699
High(7.5) Desconhecido Detalhes (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
Desconhecido · Corrigida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
dsa · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
Desconhecido · Corrigida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
dsa · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
[CVE-2026-79608 ] Published: Oct 13, 2026, 3:44:08 PM UTC
xen: CVE-2026-79608
Critical(9.8) Desconhecido Detalhes (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
Desconhecido · Corrigida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
dsa · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
Desconhecido · Corrigida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
dsa · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
[CVE-2026-102700 ] Published: Oct 13, 2026, 1:09:06 PM UTC
xen: CVE-2026-102700
Medium(4.7) Desconhecido Detalhes (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
Desconhecido · Corrigida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
dsa · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
Desconhecido · Corrigida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
dsa · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
[CVE-2026-79609 ] Published: Oct 13, 2026, 1:09:06 PM UTC
xen: CVE-2026-79609
High(8.8) Desconhecido Detalhes (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
Desconhecido · Corrigida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
dsa · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
Desconhecido · Corrigida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
dsa · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
[CVE-2026-79610 ] Published: Oct 13, 2026, 1:09:06 PM UTC
xen: CVE-2026-79610
High(8.8) Desconhecido Detalhes (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
Desconhecido · Corrigida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
dsa · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
Desconhecido · Corrigida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
dsa · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
[CVE-2026-79611 ] Published: Oct 13, 2026, 1:09:06 PM UTC
xen: CVE-2026-79611
Medium(5.5) Desconhecido Detalhes (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
Desconhecido · Corrigida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
dsa · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
Desconhecido · Corrigida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
dsa · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
[CVE-2026-79603 ] Published: Sep 8, 2026, 12:11:21 PM UTC
x86 PV guests can free memory pages while still keeping a stale TLB entry
pointing to them. A TLB flush is only issued by Xen (if needed) when the
page is re-used. Since it's possible for the page t
High(8.4) Desconhecido Detalhes (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
Desconhecido · Corrigida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
nvd · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
Desconhecido · Corrigida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
nvd · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
[CVE-2026-79602 ] Published: Sep 8, 2026, 12:11:08 PM UTC
A guest with a PCI device assigned that has at least a BAR on the IO port
space can trigger a BUG() in Xen.
High(8.8) Desconhecido Detalhes (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
Desconhecido · Corrigida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
nvd · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
Desconhecido · Corrigida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
nvd · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
[CVE-2026-62437 ] Published: Sep 8, 2026, 12:10:52 PM UTC
When guests are terminated, various pieces of cleanup need carrying out.
The cleaning up of PCI devices which were assigned to guests, and the
associated removal of tracking structures for IRQs used b
Medium(6.5) Desconhecido Detalhes (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
Desconhecido · Corrigida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
nvd · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
Desconhecido · Corrigida: 4.20.4+39-gf1e1321c87-0+deb13u1, 4.20.4+39-gf1e1321c87-1
Version impact unknown
nvd · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
[CVE-2026-62434 ] Published: Jul 28, 2026, 12:33:08 PM UTC
A guest started with Populated on Demand enabled (PoD) can attempt to
reclaim pages which aren't regular guest RAM. This can cause corruption
of memory management state in Xen.
High(7.3) Desconhecido Detalhes (2) 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
Desconhecido · Corrigida: 4.17.7-0+deb12u1, 4.20.3+127-gc42374a105-0+deb13u1, 4.20.3+127-gc42374a105-1
Version impact unknown
nvd · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
Desconhecido · Corrigida: 4.17.7-0+deb12u1, 4.20.3+127-gc42374a105-0+deb13u1, 4.20.3+127-gc42374a105-1
Version impact unknown
nvd · xen · debian · bookworm; pypi · xen · debian · 12; pypi · xen · debian · 13; pypi · xen · debian · 14
