Skip to main content

Xen oxenstored CVE-2026-79604

HIGH
2026-09-08
Information Disclosure Suse
Share

Severity by source

vuln.today AI
6.5 MEDIUM

Attacker must operate from within a guest VM (AV:L/PR:L); no complexity barrier; memory exhaustion crashes oxenstored with system-wide effect (S:C/A:H); no confidentiality or integrity impact.

3.1 AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H
SUSE
3.8 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L

Lifecycle Timeline

2
Analysis Generated
Sep 08, 2026 - 16:19 vuln.today
CVE Published
Sep 08, 2026 - 15:42 oss-security
HIGH

Description PRE-NVD

Disclosed via oss-security. NVD scoring and full description are pending.

AnalysisAI

Unbounded memory exhaustion in Xen's OCaml xenstore daemon (oxenstored) allows a malicious or compromised guest VM to trigger a system-wide denial of service by repeatedly sending xenbus reconnect requests without clearing the global watch trie. Each reconnect cycle purges only the per-domain hashtable, leaving stale watch entries to accumulate indefinitely in the global trie. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
technique details hidden
Delivery
technique details hidden
Exploit
technique details hidden
Execution
technique details hidden
Persist
technique details hidden
Impact
technique details hidden
Sign in to reveal

Vulnerability AssessmentAI

Exploitation The target Xen host must be running the OCaml oxenstored implementation - systems using C xenstored are entirely unaffected regardless of Xen version. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment No vendor-provided CVSS vector or EPSS score is included in the advisory, so all metric assessments are inferred from the description and exploitation conditions. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation Apply the XSA-512 patch set from the Xen Project. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Recommended ActionAI

Within 24 hours, identify all Xen 4.6+ systems in your infrastructure and assess guest VM isolation policies and trust boundaries. …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Vendor StatusVendor

SUSE

Severity: Moderate
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Not-Affected
SUSE Linux Enterprise Micro 5.3 Not-Affected
SUSE Linux Enterprise Micro 5.4 Not-Affected
SUSE Linux Enterprise Micro 5.5 Not-Affected
SUSE Linux Enterprise Module for Basesystem 15 SP7 Not-Affected

Share

CVE-2026-79604 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy