https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 02:15:59 +0000 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0942 certfr-2026-avi-0942 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0942 https://cve.radiocsirt.org/vuln/euvd-2026-342137 EUVD-2026-342137 https://cve.radiocsirt.org/vuln/euvd-2026-342137 https://cve.radiocsirt.org/vuln/fkie_cve-2026-62430 <p>Accesses to the CMOS memory contents are done using an indirect IO port pair. Therefore Xen needs to cache the guest chosen index, and one of the usages of the index didn&#39;t take the necessary locking to avoid concurrent changes. As a result, a guest could change the index after it being checked, causing a subsequent out-of-bound read access to the contents of an array.</p> <p>Accesses to the CMOS memory contents are done using an indirect IO port pair. Therefore Xen needs to cache the guest chosen index, and one of the usages of the index didn&#39;t take the necessary locking to avoid concurrent changes. As a result, a guest could change the index after it being checked, causing a subsequent out-of-bound read access to the contents of an array.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-62430 https://cve.radiocsirt.org/vuln/ghsa-w4qm-qcx6-wmw8 <p>Accesses to the CMOS memory contents are done using an indirect IO port pair. Therefore Xen needs to cache the guest chosen index, and one of the usages of the index didn&#39;t take the necessary locking to avoid concurrent changes. As a result, a guest could change the index after it being checked, causing a subsequent out-of-bound read access to the contents of an array.</p> <p>Accesses to the CMOS memory contents are done using an indirect IO port pair. Therefore Xen needs to cache the guest chosen index, and one of the usages of the index didn&#39;t take the necessary locking to avoid concurrent changes. As a result, a guest could change the index after it being checked, causing a subsequent out-of-bound read access to the contents of an array.</p> https://cve.radiocsirt.org/vuln/ghsa-w4qm-qcx6-wmw8 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11441-1 <p>xen-4.22.0_02-1.1 on GA media</p> <p>xen-4.22.0_02-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11441-1 https://cve.radiocsirt.org/vuln/suse-su-2026:3409-1 <p>Security update for xen</p> <p>Security update for xen</p> https://cve.radiocsirt.org/vuln/suse-su-2026:3409-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-62430 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: xen, Ubuntu:18.04:LTS: xen, Ubuntu:20.04:LTS: xen, Ubuntu:22.04:LTS: xen, Ubuntu:24.04:LTS: xen, Ubuntu:26.04:LTS: xen</p> <p>Accesses to the CMOS memory contents are done using an indirect IO port pair. Therefore Xen needs to cache the guest chosen index, and one of the usages of the index didn&#39;t take the necessary locking to avoid concurrent changes. As a result, a guest could change the index after it being checked, causing a subsequent out-of-bound read access to the contents of an array.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: xen, Ubuntu:18.04:LTS: xen, Ubuntu:20.04:LTS: xen, Ubuntu:22.04:LTS: xen, Ubuntu:24.04:LTS: xen, Ubuntu:26.04:LTS: xen</p> <p>Accesses to the CMOS memory contents are done using an indirect IO port pair. Therefore Xen needs to cache the guest chosen index, and one of the usages of the index didn&#39;t take the necessary locking to avoid concurrent changes. As a result, a guest could change the index after it being checked, causing a subsequent out-of-bound read access to the contents of an array.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-62430 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2568 <p>Ein Angreifer kann mehrere Schwachstellen in Xen ausnutzen, um seine Privilegien zu erhöhen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Xen ausnutzen, um seine Privilegien zu erhöhen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2568