CVE-2026-62432 Details
Description
The EVTCHNOP_expand_array hypercall checks for whether FIFO event channels are enabled, but without holding the correct lock. It can race with EVTCHNOP_reset, resulting in dereferencing a NULL pointer.
A race condition vulnerability has been identified in the EVTCHNOP_expand_array hypercall within Xen. This issue arises because the hypercall checks whether FIFO event channels are enabled without holding the appropriate lock, creating a race with the EVTCHNOP_reset hypercall. This race condition can lead to dereferencing a NULL pointer, causing a crash.
Applying the provided patch resolves this vulnerability. Patches for released versions are generally prepared for the stable branches and may not apply cleanly to the most recent release tarball. It is recommended to update to the tip of the stable branch before applying these patches.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jul 28, 2026CISA-ADP
Assessed Jul 28, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| http://www.openwall.com/lists/oss-security/2026/07/28/21 | CVE | |
| http://xenbits.xen.org/xsa/advisory-505.html | CVE | |
| https://xenbits.xenproject.org/xsa/advisory-505.html | [email protected] | AdvisoryRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-362 | Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| Xen | >= 4.5 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 28, 2026 | CVE Modified | CVE |
| Jul 28, 2026 | CVE Modified | CISA-ADP |
| Jul 28, 2026 | CVE Modified | CVE |
| Jul 28, 2026 | New CVE Received | [email protected] |