PT-2026-26015 · Xen · Xen
Marek Marczykowski
·
Publicado
2026-01-01
·
Atualizado
2026-03-28
·
CVE-2026-23555
CVSS v3.1
7.1
Alta
| Vetor | AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Xen (affected versions not specified)
Description
A guest issuing a Xenstore command accessing a node using the path '/local/domain/' can cause xenstored to crash due to a corrupted error indicator during node path verification. The crash is triggered by a failing assert statement within xenstored. If xenstored is built with NDEBUG defined, an unprivileged guest attempting to access the '/local/domain/' path will no longer be serviced, while other guests, including dom0, will continue to be serviced, but xenstored will consume all available CPU time. The vulnerable path is
/local/domain/.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Assertion Failure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Xen