CVE-2026-79607
5.5MediumPublished 13 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
- Impact
- High impact on availability
- Weakness
- CWE-119
Impact
A local unprivileged guest or user can trigger a denial-of-service crash of Xenstore or corrupt Xenstore data. They need local access on the host or VM to establish a watch before a live update occurs.
Root cause
During live updates, Xenstore writes the state record for a watch with a specified watch depth missing two bytes, causing an inconsistent state and crash upon reload.
Affected systems
Versions not listed — check the vendor advisory (XSA-514).
CVSS v3.1 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Fix & remediation
Apply the official patch from Xen Project Advisory XSA-514; interim mitigation is to avoid running Xenstore live updates while guests are active.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
During Xenstore live update the state record for a Xenstore watch with specified watch depth is written with two bytes missing. This results in an inconsistent state when reading the state back in the new Xenstore, causing a crash of Xenstore or wrong Xenstore data.