Xenstore Watch State Record Byte Omission Crash
CVE-2026-79607 Published on October 13, 2026
Xenstore: Guests can crash xenstored during Live Update
During Xenstore live update the state record for a Xenstore watch with
specified watch depth is written with two bytes missing. This results
in an inconsistent state when reading the state back in the new Xenstore,
causing a crash of Xenstore or wrong Xenstore data.
Vulnerability Analysis
CVE-2026-79607 can be exploited with local system access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity, and a high impact on availability.
Weakness Type
What is a Buffer Overflow Vulnerability?
The software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.
CVE-2026-79607 has been classified to as a Buffer Overflow vulnerability or weakness.
Products Associated with CVE-2026-79607
Want to know whenever a new CVE is published for Citrix Xen Xen? stack.watch will email you.
