Bug 2529764 (CVE-2026-79603) - CVE-2026-79603 xen: Xen: PV guests can modify scrubbed memory pages due to stale TLB entries
Summary: CVE-2026-79603 xen: Xen: PV guests can modify scrubbed memory pages due to st...
Keywords:
Status: NEW
Alias: CVE-2026-79603
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
high
high
Target Milestone: ---
Assignee: Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 2529852
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-09-08 12:46 UTC by OSIDB Bzimport
Modified: 2026-09-08 14:53 UTC (History)
0 users

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2026-09-08 12:46:44 UTC 
x86 PV guests can free memory pages while still keeping a stale TLB entry
pointing to them.  A TLB flush is only issued by Xen (if needed) when the
page is re-used.  Since it's possible for the page to be scrubbed ahead of
the TLB flush, there's a window where a PV guest can modify an already
scrubbed page.
Note You need to log in before you can comment on or make changes to this bug.