Bug 2559183 - CVE-2026-79609 xen: Xen: Denial of Service via guest page table access beyond direct memory mapping [fedora-all]
Summary: CVE-2026-79609 xen: Xen: Denial of Service via guest page table access beyond...
Keywords:
Status: NEW
Alias: None
Product: Fedora
Classification: Fedora
Component: xen
Version: rawhide
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: ---
Assignee: Michael Young
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard: {"flaws": ["a862a8f7-f600-4583-8f29-2...
Depends On:
Blocks: CVE-2026-79609
TreeView+ depends on / blocked
 
Reported: 2026-10-22 17:28 UTC by Oleg Sushchenko
Modified: 2026-10-22 17:28 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Oleg Sushchenko 2026-10-22 17:28:03 UTC
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.

XPTI (Xen Page Table Isolation) was introduced to mitigate Meltdown
(CVE-2017-5754, one aspect of XSA-254).  This involves copying 64-bit PV
guest page table entries from guest-chosen root page tables to the Xen-
chosen one which is in actual use by hardware.  To read the guest root
page table, the directmap is used.  PV guests, however, have a directmap
which may not cover all memory; in particular this is the case if any
memory extends beyond the 5 TiB (CONFIG_BIGMEM=y: 3.5 TiB) address
boundary.


Note You need to log in before you can comment on or make changes to this bug.