Xenstore Vulnerability in XEN_DOMCTL_get_domain_state Management for Xen Hypervisor

CVE-2026-42492

What is CVE-2026-42492?

The vulnerability in Xenstore relates to the management of domain state information through the XEN_DOMCTL_get_domain_state operation. When the system tries to capture the current status of domains, an error in handling the bitmap can occur, specifically when triggered by unprivileged domains. This condition may lead to a scenario where the bitmap, which is supposed to represent the active states, is improperly managed. As a result, it could impact system reliability and security, potentially allowing unauthorized access or control.

References