CVE-2026-62434

Published: Jul 28, 2026Modified: Jul 28, 2026Deferred

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Exploitability: 3.9 / Impact: 1.4

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

A guest started with Populated on Demand enabled (PoD) can attempt to reclaim pages which aren't regular guest RAM. This can cause corruption of memory management state in Xen.

Related CWEs

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (3)

https://xenbits.xenproject.org/xsa/advisory-507.html

Source: security@xen.org

http://www.openwall.com/lists/oss-security/2026/07/28/23

Source: af854a3a-2127-422b-91ae-364da2661108

http://xenbits.xen.org/xsa/advisory-507.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.