Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-23558

Опубликовано: 19 мая 2026
Источник: nvd
CVSS3: 7.8
EPSS Низкий

Описание

The adjustments made for XSA-379 as well as those subsequently becoming XSA-387 still left a race window, when a HVM or PVH guest does a grant table version change from v2 to v1 in parallel with mapping the status page(s) via XENMEM_add_to_physmap. Some of the status pages may then be freed while mappings of them would still be inserted into the guest's secondary (P2M) page tables.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*
Версия от 4.0.0 (включая)

EPSS

Процентиль: 2%
0.00117
Низкий

7.8 High

CVSS3

Дефекты

CWE-362

Связанные уязвимости

CVSS3: 7.8
ubuntu
3 месяца назад

The adjustments made for XSA-379 as well as those subsequently becoming XSA-387 still left a race window, when a HVM or PVH guest does a grant table version change from v2 to v1 in parallel with mapping the status page(s) via XENMEM_add_to_physmap. Some of the status pages may then be freed while mappings of them would still be inserted into the guest's secondary (P2M) page tables.

CVSS3: 7.8
debian
3 месяца назад

The adjustments made for XSA-379 as well as those subsequently becomin ...

CVSS3: 7.8
github
3 месяца назад

The adjustments made for XSA-379 as well as those subsequently becoming XSA-387 still left a race window, when a HVM or PVH guest does a grant table version change from v2 to v1 in parallel with mapping the status page(s) via XENMEM_add_to_physmap. Some of the status pages may then be freed while mappings of them would still be inserted into the guest's secondary (P2M) page tables.

suse-cvrf
3 месяца назад

Security update for xen

suse-cvrf
4 месяца назад

Security update for xen

EPSS

Процентиль: 2%
0.00117
Низкий

7.8 High

CVSS3

Дефекты

CWE-362