https://seclists.org/oss-sec/2026/q4/145: Xen Security Advisory 517 v2 (CVE-2026-79610) - grant-table: double version change race
Published Oct 13, 2026
·Updated
Affected Software
1 affected component
Xen Project Xen>=4.0
Frequently Asked Questions
1
Which guests can leverage this issue?
Exploitation is limited to unprivileged x86 guests that are permitted to use grant table version 2 interfaces and have multiple vCPUs. Arm guests cannot leverage it because grant table version 2 use is explicitly unsupported on Arm.
2
Are older Xen releases affected?
All Xen versions from 4.0 onward are vulnerable. Xen versions 3.4 and earlier are not vulnerable.
3
What could successful exploitation achieve?
An unprivileged guest may be able to elevate privileges to those of the host. Information disclosure and denial of service are also possible.