CVE-2026-42492

vIRQ event channel binding may break Xenstore

High · published July 28, 2026

CVSS v3.1
7.5
EPSS
1%
Percentile
48.5
In the wild
Unconfirmed
What it is

Xenstore, to have an up-to-date picture of the entire system, wants to

know of domains appearing and disappearing. To make this more robust, a

new XEN_DOMCTL_get_domain_state was introduced. The management of the

bitmap underlying that operation is tied into the binding of the

VIRQ_DOM_EXC virtual IRQ. Unfortunately an error path there would tear

down the bitmap even in cases when it wasn't set up. Unprivileged domains

can trigger that error path.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00609 · 48.5th percentile
Published
2026-07-28T12:31Z
EPSS history
Timeline
  • 28 JUL 12:31Z
    vIRQ event channel binding may break Xenstore
    cvelistv5