| Advisory | Public release | Updated | Version | CVE(s) | Title |
|---|---|---|---|---|---|
| XSA-522 | 2026-10-09 08:52 | 2026-10-09 08:52 | 1 | CVE-2026-98375 | Linux xen-netfront: backend can crash guest via malformed RX packets |
| XSA-521 | 2026-10-13 12:00 | 2026-10-13 12:29 | 2 | CVE-2026-102701 | tapdisk: Out-of-bounds access in tap_ctl_connect_xenblkif() |
| XSA-520 | 2026-10-13 12:00 | 2026-10-13 12:28 | 2 | CVE-2026-102700 | gnttab: cache-flush handling may cause page reference leak |
| XSA-519 | 2026-10-13 12:00 | 2026-10-13 12:28 | 2 | CVE-2026-102699 CVE-2026-102702 | Arm: multiple issues with GNTTABOP_cache_flush |
| XSA-518 | 2026-10-13 12:00 | 2026-10-13 12:28 | 2 | CVE-2026-79611 | VMX: VMentry failure with branch tracing and blocked states |
| XSA-517 | 2026-10-13 12:00 | 2026-10-13 12:28 | 2 | CVE-2026-79610 | grant-table: double version change race |
| XSA-516 | 2026-10-13 12:00 | 2026-10-13 12:28 | 2 | CVE-2026-79609 | x86: XPTI may break on huge-memory systems |
| XSA-515 | 2026-10-13 12:00 | 2026-10-13 12:28 | 2 | CVE-2026-79608 | x86/AMD: ineffectual Zenbleed workaround |
| XSA-514 | 2026-10-13 12:00 | 2026-10-13 12:28 | 2 | CVE-2026-79607 | Xenstore: Guests can crash xenstored during Live Update |
| XSA-513 | 2026-09-08 12:00 | 2026-09-08 12:00 | 3 | CVE-2026-79605 CVE-2026-79606 | Out-of-bounds accesses in Tapdisk |
| XSA-512 | 2026-09-08 12:00 | 2026-09-08 12:00 | 3 | CVE-2026-79604 | oxenstored: Unbounded accumulation of watches |
| XSA-511 | 2026-09-08 12:00 | 2026-09-08 12:00 | 3 | CVE-2026-79603 | Unconditionally do TLB flushing ahead of page scrubbing |
| XSA-510 | 2026-09-08 12:00 | 2026-09-08 12:00 | 3 | CVE-2026-79602 | x86: improper handling of HVM emulation return codes |
| XSA-509 | 2026-09-08 12:00 | 2026-09-08 12:00 | 3 | CVE-2026-62437 | x86: DMs may cause mem leak by IRQ binding |
| XSA-508 | 2026-07-28 12:00 | 2026-07-28 12:05 | 2 | none (yet) assigned | pygrub is only supported in de-privileged mode |
| XSA-507 | 2026-07-28 12:00 | 2026-07-28 12:05 | 2 | CVE-2026-62434 | PoD: Don't try to reclaim special pages |
| XSA-506 | 2026-07-28 12:00 | 2026-07-28 12:05 | 2 | CVE-2026-62433 | correct buffer checks for DM_OP hypercalls |
| XSA-505 | 2026-07-28 12:00 | 2026-07-28 12:05 | 2 | CVE-2026-62432 | evtchn: Race between FIFO expand and reset |
| XSA-504 | 2026-07-28 12:00 | 2026-07-28 12:05 | 2 | CVE-2026-62431 | Viridian STIMER division by zero |
| XSA-503 | 2026-07-28 12:00 | 2026-07-28 12:05 | 2 | CVE-2026-62430 | x86: Out-of-bounds read in vRTC emulation |
| XSA-502 | 2026-07-28 12:00 | 2026-07-28 12:05 | 3 | CVE-2026-62429 | vNUMA domain cleanup may race other operations |
| XSA-501 | 2026-07-28 12:00 | 2026-07-28 12:05 | 4 | CVE-2026-62435 CVE-2026-62436 | grant-table: version change racing with other operations |
| XSA-500 | 2026-07-28 12:00 | 2026-07-28 12:05 | 2 | CVE-2026-62428 | grant-table: type confusion in grant-copy |
| XSA-499 | 2026-07-28 12:00 | 2026-07-28 12:05 | 2 | CVE-2026-62426 CVE-2026-62427 | sysctl and platform-op locks open to abuse |
| XSA-498 | 2026-07-14 12:00 | 2026-07-14 12:05 | 2 | CVE-2026-42491 | XAPI: Missing TLS verification in some SDKs |
| XSA-497 | 2026-07-28 12:00 | 2026-07-28 12:04 | 2 | CVE-2026-42494 CVE-2026-42495 CVE-2026-62423 CVE-2026-62424 CVE-2026-62425 | buffer overruns in libfsimage iso9660 handling |
| XSA-496 | 2026-07-28 12:00 | 2026-07-28 12:04 | 2 | CVE-2026-42492 | vIRQ event channel binding may break Xenstore |
| XSA-495 | 2026-07-28 12:00 | 2026-07-28 12:04 | 2 | CVE-2026-42493 | x86 shadow paging is deprecated |
| XSA-494 | 2026-06-09 12:00 | 2026-06-09 12:01 | 3 | CVE-2026-42488 | x86: mismatched mapcache metadata |
| XSA-493 | 2026-06-09 12:00 | 2026-06-09 12:01 | 2 | CVE-2025-10263 | Arm: Completion of memory accesses not guaranteed by completion of a TLBI |
| XSA-492 | 2026-06-09 12:00 | 2026-06-09 12:01 | 3 | CVE-2026-42489 CVE-2026-42490 | domctl lock open to abuse |
| XSA-491 | 2026-06-09 12:00 | 2026-06-09 12:00 | 2 | CVE-2026-42487 | x86 HVM I/O port list traversal |
| XSA-490 | 2026-05-12 16:02 | 2026-10-08 15:29 | 2 | CVE-2025-54518 | x86: CPU Opcode Cache corruption |
| XSA-489 | 2026-04-28 18:05 | 2026-04-29 16:36 | 2 | CVE-2026-23559 CVE-2026-23560 CVE-2026-23561 CVE-2026-23562 CVE-2026-42486 | Multiple RBAC issues in XAPI |
| XSA-488 | 2026-04-17 17:02 | 2026-04-28 17:39 | 2 | CVE-2025-54505 | x86: Floating Point Divider State Sampling |
| XSA-487 | 2026-04-28 12:00 | 2026-04-28 12:01 | 2 | CVE-2026-31787 | Linux kernel double free in Xen privcmd driver |
| XSA-486 | 2026-04-28 12:00 | 2026-04-28 12:01 | 2 | CVE-2026-23558 | grant table v2 race in status page mapping |
| XSA-485 | 2026-04-28 12:00 | 2026-04-28 12:01 | 2 | CVE-2026-31786 | Linux kernel out of bounds read via Xen-related sysfs file |
| XSA-484 | 2026-04-28 12:00 | 2026-04-28 12:01 | 2 | CVE-2026-23557 | Xenstored DoS via XS_RESET_WATCHES command |
| XSA-483 | 2026-04-28 12:00 | 2026-04-28 12:01 | 2 | CVE-2026-23556 | oxenstored keeps quota related use counts across domain destruction |
| XSA-482 | 2026-03-24 12:00 | 2026-03-24 12:21 | 3 | CVE-2026-31788 | Linux privcmd driver can circumvent kernel lockdown |
| XSA-481 | 2026-03-17 12:00 | 2026-03-17 12:05 | 2 | CVE-2026-23555 | Xenstored DoS by unprivileged domain |
| XSA-480 | 2026-03-17 12:00 | 2026-03-17 12:05 | 3 | CVE-2026-23554 | Use after free of paging structures in EPT |
| XSA-479 | 2026-01-27 12:00 | 2026-01-27 12:00 | 2 | CVE-2026-23553 | x86: incomplete IBPB for vCPU isolation |
| XSA-478 | 2026-01-27 12:00 |