CVE-2026-62430: x86: Out-of-bounds read in vRTC emulation
Accesses to the CMOS memory contents are done using an indirect IO port pair. Therefore Xen needs to cache the guest chosen index, and one of the usages of the index didn't take the necessary locking to avoid concurrent changes. As a result, a guest could change the index after it being checked, causing a subsequent out-of-bound read access to the contents of an array.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-62430?
The severity of CVE-2026-62430 is high with a CVSS score of 7.5.
What type of vulnerability is CVE-2026-62430?
CVE-2026-62430 is classified as a race condition vulnerability in the vRTC emulation of the Xen Project Xen Hypervisor.
How do I fix CVE-2026-62430?
To fix CVE-2026-62430, you should update your Xen Project Xen Hypervisor to the latest patched version provided by the Xen Project.
What are the potential impacts of CVE-2026-62430?
CVE-2026-62430 could allow a guest to change the index after it has been checked, leading to potential out-of-bounds memory reads.
Which software is affected by CVE-2026-62430?
CVE-2026-62430 specifically affects the Xen Project Xen Hypervisor.