CVE-2026-79603EPSS p11.7%
CVE-2026-79603CVE-2026-79603
Description
x86 PV guests can free memory pages while still keeping a stale TLB entry
pointing to them. A TLB flush is only issued by Xen (if needed) when the
page is re-used. Since it's possible for the page to be scrubbed ahead of
the TLB flush, there's a window where a PV guest can modify an already
scrubbed page.
Scoring
| CVSS | 4.3 () |
| Vector | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
| EPSS | 0.22% probability of exploitation · percentile 11.7% · 2026-10-05T12:00:23Z |
| Last modified | 2026-09-08 |