[ CVE-2026-79610 · Published 13 Oct 2026 ]
Vulnerability in Xen
[ Description ]Official description
XSA-501 was about issues with v1 -> v2 and v2 -> v1 changes racing certain other grant table operations. Sadly a v2 -> v1 -> v2 change has yet another effect which wasn't accounted for: During the first change, status pages would be freed. During the second change they would be allocated again. Hence across the full pair of change the addresses of the status pages may change, rendering stale previously calculated pointers into the status array.
[ Fixes ]Fixes and patches
- Security bulletin: Citrix CTX697187Vendor patch or bulletin · CERT-FR · support.citrix.com/support-home/kbsearch/article, cited by CERT-FR CERTFR-2026-AVI-1310
- Security bulletin: Citrix CTX697181Vendor patch or bulletin · CERT-FR · support.citrix.com/support-home/kbsearch/article, cited by CERT-FR CERTFR-2026-AVI-1310
- Security bulletin: Citrix CTX697170Vendor patch or bulletin · CERT-FR · support.citrix.com/support-home/kbsearch/article, cited by CERT-FR CERTFR-2026-AVI-1310
[ Advisories ]Government CERT advisories
-
CERT-FRCERTFR-2026-AVI-1302
Multiple vulnerabilities in Xen Translated from French
Multiple vulnerabilities have been discovered in Xen. Some of them allow an attacker to cause arbitrary code execution, privilege escalation and a breach of data confidentiality.
-
CERT-FRCERTFR-2026-AVI-1310
Multiple vulnerabilities in Citrix products Translated from French
Multiple vulnerabilities have been discovered in Citrix products. Some of them allow an attacker to cause arbitrary code execution, privilege escalation and remote denial of service.
-
BSI CERT-BundWID-SEC-2026-3930
Xen: Multiple vulnerabilities Translated from German