🔐 CVE Alert

CVE-2026-79602

HIGH 8.8

x86: improper handling of HVM emulation return codes

CVSS Score
8.8
EPSS Score
0.0%
EPSS Percentile
0th

A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG() in Xen.

Vendor xen
Product xen
Published Sep 8, 2026
Last Updated Sep 10, 2026
Stay Ahead of the Next One

Get instant alerts for xen xen

Be the first to know when new high vulnerabilities affecting xen xen are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Xen / Xen
All versions affected

References

NVD ↗ CVE.org ↗ EPSS Data ↗
xenbits.xenproject.org: https://xenbits.xenproject.org/xsa/advisory-510.html xenbits.xen.org: http://xenbits.xen.org/xsa/advisory-510.html openwall.com: http://www.openwall.com/lists/oss-security/2026/09/08/7

Credits

This issue was discovered by Jiqian Chen of AMD and diagnosed as a security issue by Roger Pau Monné of AMD.