CVE-2026-62430
Severity CVSS v4.0:
Pending analysis
Type:
CWE-362
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Publication date:
28/07/2026
Last modified:
28/07/2026
Description
Accesses to the CMOS memory contents are done using an indirect IO port<br />
pair. Therefore Xen needs to cache the guest chosen index, and one of<br />
the usages of the index didn&#39;t take the necessary locking to avoid<br />
concurrent changes. As a result, a guest could change the index after<br />
it being checked, causing a subsequent out-of-bound read access to the<br />
contents of an array.
Impact
Base Score 3.x
7.50
Severity 3.x
HIGH