CVE-2026-79610— grant-table: double version change race
Quick assessment
Affected
Xen Xen
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
XSA-501 涉及 v1 到 v2 以及 v2 到 v1 的变更与某些其他授予表（grant table）操作之间的竞态问题。不幸的是，v2 → v1 → v2 的连续变更还会产生另一种未被考虑到的影响：在第一次变更期间，状态页（status pages）会被释放；在第二次变更期间，它们又会被重新分配。因此，在整个成对的变更过程中，状态页的地址可能发生变化，从而导致先前计算出的指向状态数组的指针变为陈旧（失效）。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-79610
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
grant-table: double version change race
Source: CVE Program / CVE List V5
Vulnerability Description
XSA-501 was about issues with v1 -> v2 and v2 -> v1 changes racing certain
other grant table operations. Sadly a v2 -> v1 -> v2 change has yet
another effect which wasn't accounted for: During the first change, status
pages would be freed. During the second change they would be allocated
again. Hence across the full pair of change the addresses of the status
pages may change, rendering stale previously calculated pointers into the
status array.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-79610
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-79610
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-79610 (1)
Same Patch Batch · Xen · 2026-10-13 · 8 CVEs total
| CVE-2026-102699 | Arm: multiple issues with GNTTABOP_cache_flush | |
| CVE-2026-102700 | gnttab: cache-flush handling may cause page reference leak | |
| CVE-2026-102702 | Arm: multiple issues with GNTTABOP_cache_flush | |
| CVE-2026-79607 | Xenstore: Guests can crash xenstored during Live Update | |
| CVE-2026-79611 | VMX: VMentry failure with branch tracing and blocked states | |
| CVE-2026-79609 | x86: XPTI may break on huge-memory systems | |
| CVE-2026-79608 | x86/AMD: ineffectual Zenbleed workaround |
IV. Related Vulnerabilities
Same product: Xen
-
CVE-2026-102700
gnttab: cache-flush handling may cause page reference leak -
CVE-2026-102702
Arm: multiple issues with GNTTABOP_cache_flush -
CVE-2026-102699
Arm: multiple issues with GNTTABOP_cache_flush -
CVE-2026-79611
VMX: VMentry failure with branch tracing and blocked states -
CVE-2026-79609
x86: XPTI may break on huge-memory systems
Same vendor: Xen
-
CVE-2026-102700
gnttab: cache-flush handling may cause page reference leak -
CVE-2026-102699
Arm: multiple issues with GNTTABOP_cache_flush -
CVE-2026-102702
Arm: multiple issues with GNTTABOP_cache_flush -
CVE-2026-79611
VMX: VMentry failure with branch tracing and blocked states -
CVE-2026-79609
x86: XPTI may break on huge-memory systems
V. Comments for CVE-2026-79610
No comments yet