Beveiligingsadvies

CVE-2026-42487

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-18 13:46:53
Laatst bijgewerkt 2026-06-18 15:07:31
Toegewezen door XEN
CVSS-score 7.9
Status PUBLISHED

Beschrijving

HVM guest I/O port accesses are subject to either emulation or at least translation. Translations are managed by the device model (via XEN_DOMCTL_ioport_mapping), and hence the linked list used may changed at any time. Traversal of those lists (while handling guest I/O port accesses) therefore needs synchronizing with updates, which was missing so far.