Xen: Div-by-Zero in Viridian STIMER Handler Causing #DE Fault
CVE-2026-62431 Published on July 28, 2026
Viridian STIMER division by zero
The logic to handle periodic Viridian STIMERs performs a division with an
unchecked user-controlled divisor value, that can be set to zero to cause a #DE
fault.
Vulnerability Analysis
CVE-2026-62431 can be exploited with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity, and a high impact on availability.
Weakness Type
Divide By Zero
The product divides a value by zero. This weakness typically occurs when an unexpected value is provided to the product, or if an error occurs that is not properly detected. It frequently occurs in calculations involving physical dimensions such as size, length, width, and height.
Products Associated with CVE-2026-62431
Want to know whenever a new CVE is published for Citrix Xen Xen? stack.watch will email you.
