The adjustments made for XSA-379 as well as those subsequently becoming
XSA-387 still left a race window, when a HVM or PVH guest does a grant
table version change from v2 to v1 in parallel with mapping the status
page(s) via XENMEM_add_to_physmap. Some of the status pages may then be
freed while mappings of them would still be inserted into the guest's
secondary (P2M) page tables.
References
| Link | Resource |
|---|---|
| https://xenbits.xenproject.org/xsa/advisory-486.html | Mitigation Patch Vendor Advisory |
| http://www.openwall.com/lists/oss-security/2026/04/28/13 | Mailing List Mitigation Patch Third Party Advisory |
| http://xenbits.xen.org/xsa/advisory-486.html | Mitigation Patch Vendor Advisory |
Configurations
History
19 May 2026, 18:55
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://xenbits.xenproject.org/xsa/advisory-486.html - Mitigation, Patch, Vendor Advisory | |
| References | () http://www.openwall.com/lists/oss-security/2026/04/28/13 - Mailing List, Mitigation, Patch, Third Party Advisory | |
| References | () http://xenbits.xen.org/xsa/advisory-486.html - Mitigation, Patch, Vendor Advisory | |
| CPE | cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:* | |
| First Time |
Xen xen
Xen |
19 May 2026, 16:16
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-362 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
19 May 2026, 14:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-05-19 14:16
Updated : 2026-05-19 18:55
NVD link : CVE-2026-23558
Mitre link : CVE-2026-23558
CVE.ORG link : CVE-2026-23558
JSON object : View
Products Affected
xen
- xen
CWE
CWE-362
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')