CVE-2026-23555

HIGH EPSS 7.9%
Published Mar 23, 20263mo ago · Modified Jun 17, 20262w ago
7.1 CVSS 3.1
High
Find Similar
Published Mar 23, 2026 3mo ago
Last Modified Jun 17, 2026 2w ago

Description

Any guest issuing a Xenstore command accessing a node using the (illegal) node path "/local/domain/", will crash xenstored due to a clobbered error indicator in xenstored when verifying the node path. Note that the crash is forced via a failing assert() statement in xenstored. In case xenstored is being built with NDEBUG #defined, an unprivileged guest trying to access the node path "/local/domain/" will result in it no longer being serviced by xenstored, other guests (including dom0) will still be serviced, but xenstored will use up all cpu time it can get.

CVSS Details

Base Score
7.1
Exploitability
2.5
Impact
4.0
Vector string
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Changed
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
7.9% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-617

Affected Products 1

VendorProductVersionRange
xenxen*≥4.18.0

References 3

  • openwall.com http://www.openwall.com/lists/oss-security/2026/03/17/7
    Mailing ListPatchThird Party Advisory
  • xenbits.xen.org http://xenbits.xen.org/xsa/advisory-481.html
    PatchVendor Advisory
  • xenbits.xenproject.org https://xenbits.xenproject.org/xsa/advisory-481.html
    PatchVendor Advisory

Remediation

  • openwall.com http://www.openwall.com/lists/oss-security/2026/03/17/7
    Mailing ListPatchThird Party Advisory
  • xenbits.xen.org http://xenbits.xen.org/xsa/advisory-481.html
    PatchVendor Advisory
  • xenbits.xenproject.org https://xenbits.xenproject.org/xsa/advisory-481.html
    PatchVendor Advisory