๐Ÿ” CVE Alert

CVE-2026-62432

UNKNOWN 0.0

evtchn: Race between FIFO expand and reset

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

The EVTCHNOP_expand_array hypercall checks for whether FIFO event channels are enabled, but without holding the correct lock. It can race with EVTCHNOP_reset, resulting in dereferencing a NULL pointer.

Vendor xen
Product xen
Published Jul 28, 2026
Last Updated Jul 28, 2026
Stay Ahead of the Next One

Get instant alerts for xen xen

Be the first to know when new unknown vulnerabilities affecting xen xen are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

Affected Versions

Xen / Xen
All versions affected

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
xenbits.xenproject.org: https://xenbits.xenproject.org/xsa/advisory-505.html xenbits.xen.org: http://xenbits.xen.org/xsa/advisory-505.html