PT-2026-65476 · Xen · Xen

CVE-2026-62434 · Published 2026-07-28 · Updated 2026-07-28

Mitre

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

A guest started with Populated on Demand enabled (PoD) can attempt to reclaim pages which aren't regular guest RAM. This can cause corruption of memory management state in Xen.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2026-62434

Affected Products

Xen

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-62434 · Security Note
• http://xenbits.xen.org/xsa/advisory-507.html · Note
• https://xenbits.xenproject.org/xsa/advisory-507.html · Note