CVE-2026-79603

x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to them. A TLB flush is only issued by Xen (if needed) when the page is re-used. Since it's possible for the page to be scrubbed ahead of the TLB flush, there's a window where a PV guest can modify an already scrubbed page.

• CWE-664

• https://xenbits.xenproject.org/xsa/advisory-511.html
• https://www.openwall.com/lists/oss-security/2026/09/08/8
• https://xenbits.xen.org/xsa/advisory-511.html

Published

Sep 8, 2026

Last Modified

Sep 8, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-7959Inappropriate implementation in Navigation in Google Chrome …3.1
• CVE-2026-79590A NULL pointer dereference vulnerability exists in the Prism…6.5
• CVE-2026-79591A heap-buffer-overflow and use-after-free vulnerability exis…7.8
• CVE-2026-79592An out-of-bounds read vulnerability exists in the xls_dumpSu…7.5
• CVE-2026-7960Race in Speech in Google Chrome prior to 148.0.7778.96 allow…5.3
• CVE-2026-79602A guest with a PCI device assigned that has at least a BAR o…8.8
• CVE-2026-79607During Xenstore live update the state record for a Xenstore …5.5
• CVE-2026-79608The workaround for XSA-433 (Zenbleed, CVE-2023-20593) was la…9.8
• CVE-2026-79609XPTI (Xen Page Table Isolation) was introduced to mitigate M…8.8
• CVE-2026-7961Insufficient validation of untrusted input in Permissions in…4.3
• CVE-2026-79610XSA-501 was about issues with v1 -> v2 and v2 -> v1 changes …8.8
• CVE-2026-79611For XSA-308 logic was introduced, as VMX VMEntry checks do n…5.5