CVE-2026-62434: PoD: Don't try to reclaim special pages
A guest started with Populated on Demand enabled (PoD) can attempt to reclaim pages which aren't regular guest RAM. This can cause corruption of memory management state in Xen.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch Xen Security Advisory 507 v2 (CVE-2026-62434) - Configuration
For Xen with Populated on Demand (PoD) enabled, configure PoD to not try to reclaim/claim special pages (pages which aren't regular guest RAM) to avoid corruption of Xen memory management state.
Xen PoD (Populated on Demand) PoD: Don't try to claim special pages = enabled
Event History
Frequently Asked Questions
What is the severity of CVE-2026-62434?
CVE-2026-62434 has a risk rating of 58, indicating a moderate severity level.
How do I fix CVE-2026-62434?
To fix CVE-2026-62434, apply the appropriate security patches provided by the Xen Project.
What systems are affected by CVE-2026-62434?
CVE-2026-62434 affects systems that utilize the Xen hypervisor with Populated on Demand enabled.
What are the consequences of exploiting CVE-2026-62434?
Exploitation of CVE-2026-62434 can lead to corruption of memory management state within Xen, impacting system stability.
When was CVE-2026-62434 published?
CVE-2026-62434 was published on July 28, 2026.