CVE-2025-62620: Medium severity Xen Project Xen vulnerability

Published Nov 10, 2026

Updated

Improper validation of unsafe equivalence in input could allow an attacker with high privileges to reclaim the ring buffer queue status page, potentially resulting in loss of guest memory integrity.

Affected Software

1 affected component

Xen Project Xen

Event History

Nov 10, 2026

CVE Published

via MITRE·09:43 PM

Data Sourced

via MITRE·09:43 PM

DescriptionWeakness

Data Sourced

via NVD·10:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Does exploitation require existing privileged access?

Yes. The vulnerability is rated as locally exploitable and requires high privileges; no user interaction is required.

What impact is indicated if exploitation succeeds?

The stated consequence is potential loss of guest memory integrity through reclamation of the ring buffer queue status page. The supplied metrics indicate no confidentiality or availability impact and no impact to the vulnerable component's own integrity.

CVE-2025-62620: Medium severity Xen Project Xen vulnerability

Affected Software

Event History

Frequently Asked Questions

Does exploitation require existing privileged access?

What impact is indicated if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

Does exploitation require existing privileged access?

What impact is indicated if exploitation succeeds?