CVE Explorer

CVE-2026-42487

HVM guest I/O port accesses are subject to either emulation or at least translation. Translations are managed by the device model (via XEN_DOMCTL_ioport_mapping), and hence the linked list used may changed at any time. Traversal of those lists (while handling guest I/O port accesses) therefore needs synchronizing with updates, which was missing so far.

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:318c859ce13e847dba546abb45e4ab073b1ed665415eb981f3933a36345b0fc2

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Affected products and versions

1 source assertion

{"defaultStatus":"unknown","product":"Xen","vendor":"Xen","versions":[{"status":"unknown","version":"consult Xen advisory XSA-491"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a318646826a2171d993ccd9c235b0df74c2de277012fb814616cdb762a80c96d · sha256:e103805624eb65fa… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion

{"metric":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.9,"baseSeverity":"HIGH","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H","version":"3.1"},"metric_type":"cvssV3_1"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:a318646826a2171d993ccd9c235b0df74c2de277012fb814616cdb762a80c96d · sha256:e103805624eb65fa… · /containers/adp/0/metrics/0/cvssV3_1

CWE assertions

1 source assertion

{"cweId":"CWE-362","description":"CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:a318646826a2171d993ccd9c235b0df74c2de277012fb814616cdb762a80c96d · sha256:e103805624eb65fa… · /containers/adp/0/problemTypes/0/descriptions/0

Source references

3 source assertions

{"url":"http://www.openwall.com/lists/oss-security/2026/06/09/11"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:a318646826a2171d993ccd9c235b0df74c2de277012fb814616cdb762a80c96d · sha256:e103805624eb65fa… · /containers/adp/1/references/1

{"url":"http://xenbits.xen.org/xsa/advisory-491.html"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:a318646826a2171d993ccd9c235b0df74c2de277012fb814616cdb762a80c96d · sha256:e103805624eb65fa… · /containers/adp/1/references/0

{"url":"https://xenbits.xenproject.org/xsa/advisory-491.html"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:a318646826a2171d993ccd9c235b0df74c2de277012fb814616cdb762a80c96d · sha256:e103805624eb65fa… · /containers/cna/references/0

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer