CVE-2026-62434

PoD: Don't try to reclaim special pages

Medium · published July 28, 2026

CVSS v3.1
5.3
EPSS
0%
Percentile
30.5
In the wild
Unconfirmed
What it is

A guest started with Populated on Demand enabled (PoD) can attempt to

reclaim pages which aren't regular guest RAM. This can cause corruption

of memory management state in Xen.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00377 · 30.5th percentile
Published
2026-07-28T12:33Z
EPSS history
Timeline
  • 28 JUL 12:33Z
    PoD: Don't try to reclaim special pages
    cvelistv5