CVE-2026-42492— Xen 安全漏洞

vIRQ event channel binding may break Xenstore

Xenstore, to have an up-to-date picture of the entire system, wants to know of domains appearing and disappearing. To make this more robust, a new XEN_DOMCTL_get_domain_state was introduced. The management of the bitmap underlying that operation is tied into the binding of the VIRQ_DOM_EXC virtual IRQ. Unfortunately an error path there would tear down the bitmap even in cases when it wasn't set up. Unprivileged domains can trigger that error path.

N/A

N/A

Xen 安全漏洞

Xen是Xen组织开源的一款开源的虚拟机监视器产品。该产品能够使不同和不兼容的操作系统运行在同一台计算机上,并支持在运行时进行迁移,保证正常运行并且避免宕机。 Xen 4.21版本及之后版本存在安全漏洞，该漏洞源于Xenstore管理域状态时，XEN_DOMCTL_get_domain_state操作中位图管理错误路径导致，非特权域可触发该错误路径，可能造成拒绝服务或hypervisor崩溃。

N/A

N/A