CVE-2026-62426
Description
A flaw was found in Xen. The system's sysctl operations utilize a global lock that lacks fairness in its acquisition mechanism. Additionally, when Xen Security Modules (XSM) with Flask are active, this lock can be acquired before proper permission checks are performed. This vulnerability could allow a malicious guest (virtual machine) to repeatedly seize and hold the sysctl lock indefinitely, leading to a denial of service by preventing other guests and the control domain from performing critical system management operations.
Statement
Red Hat Product Security has determined that this vulnerability does not affect any currently supported Red Hat product. This assessment may evolve based on further analysis and discovery. For more information about this vulnerability and the products it affects, please see the linked references.
Understanding the Weakness (CWE)
Integrity,Availability
Technical Impact: Modify Application Data; DoS: Instability; DoS: Crash, Exit, or Restart
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
