CYBERSECURITYTRACKER
Permanent story citation

Xen Security Advisory 514 v2 (CVE-2026-79607) - Xenstore: Guests can crash xenstored during Live Update

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 10120

As cited

Copy frozen at (site build).

vulnerabilities

Xen Security Advisory 514 v2 (CVE-2026-79607) - Xenstore: Guests can crash xenstored during Live Update

Xen published Security Advisory 514 for CVE-2026-79607, a vulnerability in Xenstore where guests can crash xenstored during live update operations. The issue arises from a state record for Xenstore watches being written with two bytes missing, creating an inconsistent state.

Why it matters: Organizations running Xen hypervisors with Xenstore should evaluate this denial of service exposure and apply patches when available, as guest-initiated crashes of xenstored disrupt virtualization availability.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary