CVE-2026-42492
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
28/07/2026
Last modified:
28/07/2026
Description
Xenstore, to have an up-to-date picture of the entire system, wants to<br />
know of domains appearing and disappearing. To make this more robust, a<br />
new XEN_DOMCTL_get_domain_state was introduced. The management of the<br />
bitmap underlying that operation is tied into the binding of the<br />
VIRQ_DOM_EXC virtual IRQ. Unfortunately an error path there would tear<br />
down the bitmap even in cases when it wasn&#39;t set up. Unprivileged domains<br />
can trigger that error path.
Impact
Base Score 3.x
7.50
Severity 3.x
HIGH