Skip to main content

Suse EUVDEUVD-2026-49784

| CVE-2026-62431 HIGH
Divide By Zero (CWE-369)
2026-07-28 security@xen.org GHSA-248q-w8jq-jxj9
Information Disclosure Suse
7.5
CVSS 3.1 · Vendor: xen
Share

Severity by source

Vendor (xen) PRIMARY
7.5 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
SUSE
5.9 MEDIUM
AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

Primary rating from Vendor (xen).

CVSS VectorVendor: xen

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

5
Analysis Generated
Jul 28, 2026 - 18:35 vuln.today
Severity Changed
Jul 28, 2026 - 16:22 NVD
MEDIUM HIGH
CVSS changed
Jul 28, 2026 - 16:22 NVD
5.5 (MEDIUM) 7.5 (HIGH)
CVE Published
Jul 28, 2026 - 13:19 cve.org
UNKNOWN (no severity yet)
CVE Published
Jul 28, 2026 - 13:19 cve.org
HIGH 7.5

DescriptionCVE.org

The logic to handle periodic Viridian STIMERs performs a division with an unchecked user-controlled divisor value, that can be set to zero to cause a #DE fault.

AnalysisAI

A divide-by-zero vulnerability in Xen's Viridian periodic STIMER handling allows an attacker with guest VM access to crash the hypervisor, causing denial of service. The issue arises from an unchecked user-controlled divisor that can be set to zero, triggering a #DE fault. No active exploitation is known per SSVC, though the attack is automatable and requires no guest-level privileges.

Same weakness CWE-369 – Divide By Zero

View all
CVE-2017-11720 CRITICAL POC
9.8
CVE-2012-0207 HIGH POC
7.5
CVE-2017-7598 HIGH POC
7.8
CVE-2016-3623 HIGH POC
7.5
CVE-2023-3896 HIGH POC
7.8
CVE-2023-1127 HIGH POC
7.8
CVE-2023-0512 HIGH POC
7.8
CVE-2021-29600 HIGH POC
7.8

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Vendor StatusVendor

SUSE

Severity: Moderate
Product Status
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS Fixed
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS Fixed
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS Fixed
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS Fixed
SUSE Linux Enterprise Micro 5.3 Fixed

Share

EUVD-2026-49784 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy