Xen Hypervisor CVE-2026-42486

Apply the fixes and patches referenced in Xen Security Advisory XSA-489 at https://xenbits.xen.org/xsa/advisory-489.html as the primary remediation; consult that advisory for the exact patched Xen versions and per-branch backports, as an exact fix version was not included in the provided input. No vendor-released fix version is independently confirmed here - treat the advisory as the authoritative source. As compensating controls until patched, reduce guest attack surface by limiting who can run untrusted or attacker-controlled guests on affected hosts, avoid co-locating sensitive workloads with untrusted tenants, and restrict guest access to the specific hypervisor feature identified in XSA-489 if the advisory documents a configuration-based mitigation; the trade-off is potential loss of the affected functionality and reduced tenant density. Monitor host and dom0 integrity for signs of guest escape.