Xen Hypervisor Memory Management Vulnerability Affecting Xen Project
CVE-2026-62434

Currently unrated

Key Information:

Vendor: Xen Project
Status: Xen Project
Vendor: CVE Published:; 28 July 2026

🔔 Create Xen Project Vulnerability Alert

What is CVE-2026-62434?

A vulnerability in the Xen Hypervisor allows a guest with Populated on Demand enabled to attempt reclaiming memory pages that do not correspond to standard guest RAM. This could lead to corruption of the memory management state, potentially compromising the integrity of the hypervisor's operation and affecting other virtual machines running on the same host.

Affected Version(s)

Xen consult Xen advisory XSA-507

References

https://xenbits.xenproject.org/xsa/advisory-507.html

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 28, 2026
Vulnerability Reserved
Jul 14, 2026

CVE-2026-62434 Data

JSON