Race Condition Vulnerability in Xen Project's Hypervisor Software
CVE-2026-79610

Currently unrated

Key Information:

Vendor: Xen Project
Status: Xen Project
Vendor: CVE Published:; 13 October 2026

🔔 Create Xen Project Vulnerability Alert

What is CVE-2026-79610?

This vulnerability in the Xen Hypervisor arises from a race condition during transitions between different grant table versions, specifically when changing from v1 to v2 and back. The process can lead to the unintended release and reallocation of status pages, resulting in potentially incorrect pointers that reference outdated memory locations. This flaw can be exploited, leading to instability and unauthorized access to sensitive information within the hypervisor.

Affected Version(s)

Xen consult Xen advisory XSA-517

References

https://xenbits.xenproject.org/xsa/advisory-517.html

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 13, 2026
Vulnerability Reserved
Aug 25, 2026

Credit

This issue was discovered by Claude Opus and diagnosed as a security issue by Teddy Astie of Vates.

CVE-2026-79610 Data

JSON