Xen Vulnerability Affects PCI Device Assignments
CVE-2026-79602

Currently unrated

Key Information:

Vendor: Xen Project
Status: Xen Project
Vendor: CVE Published:; 8 September 2026

🔔 Create Xen Project Vulnerability Alert

What is CVE-2026-79602?

A flaw exists in the Xen Hypervisor related to the assignment of PCI devices with a Base Address Register (BAR) in the input/output (IO) port space. This vulnerability allows an attacker with access to a guest system to exploit the condition, leading to the triggering of a BUG() in the Xen hypervisor. Such exploitation may compromise the stability and security of the host system.

Affected Version(s)

Xen consult Xen advisory XSA-510

References

https://xenbits.xenproject.org/xsa/advisory-510.html

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 8, 2026
Vulnerability Reserved
Aug 25, 2026

Credit

This issue was discovered by Jiqian Chen of AMD and diagnosed as a security issue by Roger Pau Monné of AMD.

CVE-2026-79602 Data

JSON