CVE-2026-79607
Description
A flaw was found in Xen. During a Xenstore live update, the state record for an event watch with a specified depth is written with incomplete data. When the updated Xenstore daemon restores this truncated record, the inconsistent state can cause the service to crash or use incorrect data. This issue primarily leads to a Denial of Service (DoS) affecting virtual machine management and monitoring.
Statement
This vulnerability is rated as having Moderate impact because it requires specific administrative conditions during Xenstore live update operations and does not directly permit arbitrary code execution or privilege escalation on the host. In Red Hat enterprise environments, this flaw does not present an operational risk because the Xen hypervisor is not included or supported in Red Hat Enterprise Linux, restricting exposure primarily to community deployments.
Understanding the Weakness (CWE)
Confidentiality,Integrity
Technical Impact: Read Memory; Modify Memory; Varies by Context
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
