As cited
Copy frozen at (site build).
vulnerabilities
Xen Security Advisory 510 v3 (CVE-2026-79602) - x86: improper handling of HVM emulation return codes
Xen Security Advisory 510 (CVE-2026-79602) addresses improper handling of hypervisor emulation return codes on x86 systems. A guest with a passed-through PCI device that has a Base Address Register in IO port space can trigger a bug in Xen, leading to potential denial of service.
Why it matters: Xen administrators running virtualized infrastructure with PCI device passthrough must apply this patch to prevent guest-triggered crashes that could disrupt hosted workloads.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
Xen Security Advisory 510 v3 (CVE-2026-79602) - x86: improper handling of HVM emulation return codes
Xen disclosed CVE-2026-79602, a vulnerability in x86 HVM emulation return code handling that allows a guest with a PCI device assigned to IO port space to trigger a crash in Xen. The flaw affects systems using hardware virtual machine (HVM) passthrough on x86 processors. Xen published the advisory on September 8, 2026 with a CVSS score of 8.8.
Why it matters: Xen administrators running virtualized environments with PCI device passthrough need to assess whether assigned devices expose IO port BARs and plan patching to prevent guest-triggered denial of service.
- Source published
- First seen by Cybersecurity Tracker