Количество 9
Количество 9
GHSA-4qf9-g5cf-cx9j
The adjustments made for XSA-379 as well as those subsequently becoming XSA-387 still left a race window, when a HVM or PVH guest does a grant table version change from v2 to v1 in parallel with mapping the status page(s) via XENMEM_add_to_physmap. Some of the status pages may then be freed while mappings of them would still be inserted into the guest's secondary (P2M) page tables.
CVE-2026-23558
The adjustments made for XSA-379 as well as those subsequently becoming XSA-387 still left a race window, when a HVM or PVH guest does a grant table version change from v2 to v1 in parallel with mapping the status page(s) via XENMEM_add_to_physmap. Some of the status pages may then be freed while mappings of them would still be inserted into the guest's secondary (P2M) page tables.
CVE-2026-23558
The adjustments made for XSA-379 as well as those subsequently becoming XSA-387 still left a race window, when a HVM or PVH guest does a grant table version change from v2 to v1 in parallel with mapping the status page(s) via XENMEM_add_to_physmap. Some of the status pages may then be freed while mappings of them would still be inserted into the guest's secondary (P2M) page tables.
CVE-2026-23558
The adjustments made for XSA-379 as well as those subsequently becomin ...
SUSE-SU-2026:1998-1
Security update for xen
SUSE-SU-2026:1743-1
Security update for xen
SUSE-SU-2026:1657-1
Security update for xen
SUSE-SU-2026:2102-1
Security update for xen
SUSE-SU-2026:2066-1
Security update for xen
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-4qf9-g5cf-cx9j The adjustments made for XSA-379 as well as those subsequently becoming XSA-387 still left a race window, when a HVM or PVH guest does a grant table version change from v2 to v1 in parallel with mapping the status page(s) via XENMEM_add_to_physmap. Some of the status pages may then be freed while mappings of them would still be inserted into the guest's secondary (P2M) page tables. | CVSS3: 7.8 | 0% Низкий | 3 месяца назад |
 | CVE-2026-23558 The adjustments made for XSA-379 as well as those subsequently becoming XSA-387 still left a race window, when a HVM or PVH guest does a grant table version change from v2 to v1 in parallel with mapping the status page(s) via XENMEM_add_to_physmap. Some of the status pages may then be freed while mappings of them would still be inserted into the guest's secondary (P2M) page tables. | CVSS3: 7.8 | 0% Низкий | 3 месяца назад |
 | CVE-2026-23558 The adjustments made for XSA-379 as well as those subsequently becoming XSA-387 still left a race window, when a HVM or PVH guest does a grant table version change from v2 to v1 in parallel with mapping the status page(s) via XENMEM_add_to_physmap. Some of the status pages may then be freed while mappings of them would still be inserted into the guest's secondary (P2M) page tables. | CVSS3: 7.8 | 0% Низкий | 3 месяца назад |
| CVE-2026-23558 The adjustments made for XSA-379 as well as those subsequently becomin ... | CVSS3: 7.8 | 0% Низкий | 3 месяца назад |
 | SUSE-SU-2026:1998-1 Security update for xen | 3 месяца назад | ||
| SUSE-SU-2026:1743-1 Security update for xen | 4 месяца назад | ||
| SUSE-SU-2026:1657-1 Security update for xen | 4 месяца назад | ||
| SUSE-SU-2026:2102-1 Security update for xen | 3 месяца назад | ||
| SUSE-SU-2026:2066-1 Security update for xen | 3 месяца назад |
Уязвимостей на страницу