CVE-2026-79608

Published: Oct 13, 2026Modified: Oct 20, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

The workaround for XSA-433 (Zenbleed, CVE-2023-20593) was later re-worked to better integrate with other manipulations of the same MSR. In this rework an inverted conditional was introduced, resulting in the workaround to not be applied when needed and vice versa. For more details, see: http://xenbits.xen.org/xsa/advisory-433.html

Related CWEs

CWE-670

Always-Incorrect Control Flow Implementation

The code contains a control flow path that does not reflect the algorithm that the path is intended to implement, leading to incorrect behavior any time this path is navigated.

References (2)

https://xenbits.xenproject.org/xsa/advisory-515.html

Source: security@xen.org

http://xenbits.xen.org/xsa/advisory-515.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.