Vulnerability feed

CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run Oct 26 05:05 UTC

Critical in the last 24 hours

1602 in 30 days

Newly known exploited

In the last 24 hours, CISA KEV and vendor reports

Sources checked

Every hour, see the list

New in the last 24 hours

160-73% vs 7-day avg of 598

2 critical, 46 high, 62 medium, 30 low

Expand	Severity	Score	Advisory	Title	Source	Published
	Unknown	n/a	CVE-2026-99057	In the Linux kernel, the following vulnerability has been resolved: xen/netfront: don't leak the skb when xennet_fill_frags() fails When a response chain has more slots than... Linux, XenLinux, Linux kernel, Xen netfront	NVD	Oct 23 13:17 UTC
CVE-2026-99057In the Linux kernel, the following vulnerability has been resolved: xen/netfront: don't leak the skb when xennet_fill_frags() fails When a response chain has more slots than... Executive summary A bug in the Linux kernel's Xen network frontend driver (netfront) can leak memory when a received packet has more fragments than fit in its buffer. The advisory does not state a severity score or how an attacker could trigger it, and the fix is a kernel patch that the stable tree has applied. Technical summary The flaw is a resource leak (memory leak) in the xen/netfront driver. When xennet_fill_frags() fails because a response chain has more slots than the skb's frags can hold, xennet_poll() takes its error path, but the skb was already removed from the temporary queue and was never freed, so the skb and its attached pages leak for each overflowing chain. The advisory says the backend decides how many slots it sends, which suggests a backend-driven trigger, but it does not state an explicit attack vector or privileges required. The fix puts the skb back on tmpq before the error path, and it is tagged Fixes ad4f15dc2c70 and Cc stable. The advisory does not state a CVSS score, affected or fixed kernel version numbers, workarounds, or any detection guidance, and it does not say whether exploitation has occurred. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from git.kernel.org/stable/c/086944c1c2cbb68…c3ff08637847b03c8009 Score No CVSS score published. Affects Linux Xen Linux Linux kernel Xen netfront NIST National Vulnerability DatabasePublished Oct 23, 2026 13:17 UTC Read the advisory
	Medium	5.5	CVE-2026-79611	For XSA-308 logic was introduced, as VMX VMEntry checks do not like the exact combination of state which occurs when #DB in intercepted, Single Stepping is active, and blocked... XenXen	NVD	Oct 13 16:17 UTC
CVE-2026-79611For XSA-308 logic was introduced, as VMX VMEntry checks do not like the exact combination of state which occurs when #DB in intercepted, Single Stepping is active, and blocked... From the advisory For XSA-308 logic was introduced, as VMX VMEntry checks do not like the exact combination of state which occurs when #DB in intercepted, Single Stepping is active, and blocked by STI/MovSS is active, despite this being a legitimate state to be in. The resulting VMEntry failure is fatal to the guest. Sadly there is another special sub-case of the above, with branch tracing enabled. In that case the prior adjustment would still cause a VMentry failure, as before fatal to the guest. Impact if exploited ConfidentialityNone IntegrityNone AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affects Xen Xen NIST National Vulnerability DatabasePublished Oct 13, 2026 16:17 UTC Read the advisory
	High	8.8	CVE-2026-79610	XSA-501 was about issues with v1 -> v2 and v2 -> v1 changes racing certain other grant table operations XenXen	NVD	Oct 13 16:17 UTC
CVE-2026-79610XSA-501 was about issues with v1 -> v2 and v2 -> v1 changes racing certain other grant table operations From the advisory XSA-501 was about issues with v1 -> v2 and v2 -> v1 changes racing certain other grant table operations. Sadly a v2 -> v1 -> v2 change has yet another effect which wasn't accounted for: During the first change, status pages would be freed. During the second change they would be allocated again. Hence across the full pair of change the addresses of the status pages may change, rendering stale previously calculated pointers into the status array. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required Low User interaction None Scope Changed CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Affects Xen Xen NIST National Vulnerability DatabasePublished Oct 13, 2026 16:17 UTC Read the advisory
	High	8.8	CVE-2026-79609	XPTI (Xen Page Table Isolation) was introduced to mitigate Meltdown (CVE-2017-5754, one aspect of XSA-254) XenXen	NVD	Oct 13 16:17 UTC
CVE-2026-79609XPTI (Xen Page Table Isolation) was introduced to mitigate Meltdown (CVE-2017-5754, one aspect of XSA-254) From the advisory XPTI (Xen Page Table Isolation) was introduced to mitigate Meltdown (CVE-2017-5754, one aspect of XSA-254). This involves copying 64-bit PV guest page table entries from guest-chosen root page tables to the Xen- chosen one which is in actual use by hardware. To read the guest root page table, the directmap is used. PV guests, however, have a directmap which may not cover all memory; in particular this is the case if any memory extends beyond the 5 TiB (CONFIG_BIGMEM=y: 3.5 TiB) address boundary. Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required Low User interaction None Scope Changed CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Affects Xen Xen NIST National Vulnerability DatabasePublished Oct 13, 2026 16:17 UTC Read the advisory
	Critical	9.8	CVE-2026-79608	The workaround for XSA-433 (Zenbleed, CVE-2023-20593) was later re-worked to better integrate with other manipulations of the same MSR. In this rework an inverted conditional... XenXen	NVD	Oct 13 16:17 UTC
CVE-2026-79608The workaround for XSA-433 (Zenbleed, CVE-2023-20593) was later re-worked to better integrate with other manipulations of the same MSR. In this rework an inverted conditional... From the advisory The workaround for XSA-433 (Zenbleed, CVE-2023-20593) was later re-worked to better integrate with other manipulations of the same MSR. In this rework an inverted conditional was introduced, resulting in the workaround to not be applied when needed and vice versa. For more details, see: xenbits.xen.org/xsa/advisory-433.html Impact if exploited ConfidentialityHigh IntegrityHigh AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affects Xen Xen NIST National Vulnerability DatabasePublished Oct 13, 2026 16:17 UTC Read the advisory
	Medium	5.5	CVE-2026-79607	During Xenstore live update the state record for a Xenstore watch with specified watch depth is written with two bytes missing XenXen	NVD	Oct 13 16:17 UTC
CVE-2026-79607During Xenstore live update the state record for a Xenstore watch with specified watch depth is written with two bytes missing From the advisory During Xenstore live update the state record for a Xenstore watch with specified watch depth is written with two bytes missing. This results in an inconsistent state when reading the state back in the new Xenstore, causing a crash of Xenstore or wrong Xenstore data. Impact if exploited ConfidentialityNone IntegrityNone AvailabilityHigh How it is exploited Attack vector Local Attack complexity Low Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affects Xen Xen NIST National Vulnerability DatabasePublished Oct 13, 2026 16:17 UTC Read the advisory
	High	7.5	CVE-2026-102702	[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] 1) XSA-437 (CVE-2023-34321) addressed issues... XenXen	NVD	Oct 13 16:17 UTC
CVE-2026-102702[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] 1) XSA-437 (CVE-2023-34321) addressed issues... From the advisory [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] 1) XSA-437 (CVE-2023-34321) addressed issues with overflows in calculations involved in guests flushing caches through GNTTABOP_cache_flush. Unfortunately the fix there introduced a calculation which may underflow, resulting in a loop which would - at least on 64-bit Arm - take excessively long, and which would likely eventually crash the hypervisor. This is CVE-2026-102699. 2) GNTTABOP_cache_flush may be issued on memory mapped from another domain using the grant table interface. However there was no restriction to disallow the use of invalidate-without-clean against read-only grant mappings, which may corrupt the granted memory. This is CVE-2026-102702. Impact if exploited ConfidentialityNone IntegrityNone AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affects Xen Xen NIST National Vulnerability DatabasePublished Oct 13, 2026 16:17 UTC Read the advisory
	Medium	4.7	CVE-2026-102700	With its original introduction, GNTTAB_cache_flush was made available uniformly XenXen	NVD	Oct 13 16:17 UTC
CVE-2026-102700With its original introduction, GNTTAB_cache_flush was made available uniformly From the advisory With its original introduction, GNTTAB_cache_flush was made available uniformly. XSA-232 (CVE-2017-14318) then covered an omitted NULL pointer check, yet the addition of that check failed to adjust the subsequent error path. That error path fails to drop a page reference in case the specified page is owned by a special system domain (DOM_IO and DOM_COW are system domains which can have memory pages assigned to them.) Impact if exploited ConfidentialityNone IntegrityNone AvailabilityHigh How it is exploited Attack vector Local Attack complexity High Privileges required Low User interaction None Scope Unchanged CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H Affects Xen Xen NIST National Vulnerability DatabasePublished Oct 13, 2026 16:17 UTC Read the advisory
	High	7.5	CVE-2026-102699	[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] 1) XSA-437 (CVE-2023-34321) addressed issues... XenXen	NVD	Oct 13 16:17 UTC
CVE-2026-102699[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] 1) XSA-437 (CVE-2023-34321) addressed issues... From the advisory [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] 1) XSA-437 (CVE-2023-34321) addressed issues with overflows in calculations involved in guests flushing caches through GNTTABOP_cache_flush. Unfortunately the fix there introduced a calculation which may underflow, resulting in a loop which would - at least on 64-bit Arm - take excessively long, and which would likely eventually crash the hypervisor. This is CVE-2026-102699. 2) GNTTABOP_cache_flush may be issued on memory mapped from another domain using the grant table interface. However there was no restriction to disallow the use of invalidate-without-clean against read-only grant mappings, which may corrupt the granted memory. This is CVE-2026-102702. Impact if exploited ConfidentialityNone IntegrityNone AvailabilityHigh How it is exploited Attack vector Network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affects Xen Xen NIST National Vulnerability DatabasePublished Oct 13, 2026 16:17 UTC Read the advisory

Example	Finds
	Every word appears somewhere: title, summaries, IDs, vendor, or product
	An exact phrase
	One vendor. product: for a product, vp: for either
	Commas mean any of them, in every field
	Severity: critical, high, medium, low, or unknown
	CVSS score, with >, >=, <, or <=
	A score range
	Known exploited. is:kev works too, and kev:no leaves them out
	One source, by name
	Confidentiality impact: high, low, none, or any (low or high)
	Integrity and availability work the same way
	An advisory or CVE ID, or part of one
	A minus sign leaves out whatever the term matches

Vulnerability feed

Executive summary

Technical summary

Score

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects

From the advisory

Impact if exploited

How it is exploited

Affects