Security Advisory

CVE-2026-42487

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-18 13:46:53

Last updated 2026-06-18 15:07:31

Assigner XEN

CVSS score not scored

State PUBLISHED

Description

HVM guest I/O port accesses are subject to either emulation or at least translation. Translations are managed by the device model (via XEN_DOMCTL_ioport_mapping), and hence the linked list used may changed at any time. Traversal of those lists (while handling guest I/O port accesses) therefore needs synchronizing with updates, which was missing so far.

← Browse all CVEs View on cve.org ↗