CVE-2026-79603

Publié : 8 septembre 2026

Modifié : 8 septembre 2026

Score CVSS

4.3

MEDIUM

Description détaillée

x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to them. A TLB flush is only issued by Xen (if needed) when the page is re-used. Since it's possible for the page to be scrubbed ahead of the TLB flush, there's a window where a PV guest can modify an already scrubbed page.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Références et Patchs

https://xenbits.xenproject.org/xsa/advisory-511.html http://xenbits.xen.org/xsa/advisory-511.html

Dernières Vulnérabilités

CVE-2026-79602

A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG() in Xen.

VOIR DÉTAILS

CVE-2026-77106

Cvlaunchd contained a missing authorization issue affecting command execution authorization. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including Commserve, Webserver, Command Center, Media Agents, Clients and HyperScale X.

VOIR DÉTAILS

CVE-2026-77105

CommServe contained a cryptographic signature verification issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update CommServe and Web Server.

VOIR DÉTAILS