{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "xen: important CVE events",
 "home_page_url": "https://patchwire.jonathanross.dev/products/xen--xen/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/xen--xen/important.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102702/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102702/",
   "title": "CVE-2026-102702 · xen · disclosed",
   "content_text": "[This CNA information record relates to multiple CVEs; the\ntext explains which aspects/vulnerabilities correspond to which CVE.]\n\n1) XSA-437 (CVE-2023-34321) addressed issues with overflows in\n   calculations involved in guests flushing caches through\n   GNTTABOP_cache_flush.  Unfortunately the fix there introduced a\n   calculation which may underflow, resulting in a loop which would - at\n   least on 64-bit Arm - take excessively long, and which would likely\n   eventually crash the hypervisor.\n\n   This is CVE-2026-102699.\n\n2) GNTTABOP_cache_flush may be issued on memory mapped from another\n   domain using the grant table interface.  However there was no\n   restriction to disallow the use of invalidate-without-clean against\n   read-only grant mappings, which may corrupt the granted memory.\n\n   This is CVE-2026-102702.",
   "date_published": "2026-10-13T15:45:13Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102702/fixed/debian-13",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102702/",
   "title": "CVE-2026-102702 · xen · fixed in Debian 13 (xen 4.20.4+39-gf1e1321c87-0+deb13u1)",
   "content_text": "Fixed versions: xen 4.20.4+39-gf1e1321c87-0+deb13u1.",
   "date_published": "2026-10-13T15:45:13Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102702/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102702/",
   "title": "CVE-2026-102702 · xen · fixed in Debian 14 (xen 4.20.4+39-gf1e1321c87-1)",
   "content_text": "Fixed versions: xen 4.20.4+39-gf1e1321c87-1.",
   "date_published": "2026-10-13T15:45:13Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102699/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102699/",
   "title": "CVE-2026-102699 · xen · disclosed",
   "content_text": "[This CNA information record relates to multiple CVEs; the\ntext explains which aspects/vulnerabilities correspond to which CVE.]\n\n1) XSA-437 (CVE-2023-34321) addressed issues with overflows in\n   calculations involved in guests flushing caches through\n   GNTTABOP_cache_flush.  Unfortunately the fix there introduced a\n   calculation which may underflow, resulting in a loop which would - at\n   least on 64-bit Arm - take excessively long, and which would likely\n   eventually crash the hypervisor.\n\n   This is CVE-2026-102699.\n\n2) GNTTABOP_cache_flush may be issued on memory mapped from another\n   domain using the grant table interface.  However there was no\n   restriction to disallow the use of invalidate-without-clean against\n   read-only grant mappings, which may corrupt the granted memory.\n\n   This is CVE-2026-102702.",
   "date_published": "2026-10-13T15:45:13Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102699/fixed/alpine-v3.21",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102699/",
   "title": "CVE-2026-102699 · xen · fixed in Alpine 3.21 (xen 4.19.6-r2)",
   "content_text": "Fixed versions: xen 4.19.6-r2.",
   "date_published": "2026-10-13T15:45:13Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102699/fixed/alpine-v3.22",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102699/",
   "title": "CVE-2026-102699 · xen · fixed in Alpine 3.22 (xen 4.20.4-r2)",
   "content_text": "Fixed versions: xen 4.20.4-r2.",
   "date_published": "2026-10-13T15:45:13Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102699/fixed/alpine-v3.23",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102699/",
   "title": "CVE-2026-102699 · xen · fixed in Alpine 3.23 (xen 4.20.4-r2)",
   "content_text": "Fixed versions: xen 4.20.4-r2.",
   "date_published": "2026-10-13T15:45:13Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102699/fixed/alpine-v3.24",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102699/",
   "title": "CVE-2026-102699 · xen · fixed in Alpine 3.24 (xen 4.21.2-r2)",
   "content_text": "Fixed versions: xen 4.21.2-r2.",
   "date_published": "2026-10-13T15:45:13Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102699/fixed/debian-13",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102699/",
   "title": "CVE-2026-102699 · xen · fixed in Debian 13 (xen 4.20.4+39-gf1e1321c87-0+deb13u1)",
   "content_text": "Fixed versions: xen 4.20.4+39-gf1e1321c87-0+deb13u1.",
   "date_published": "2026-10-13T15:45:13Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102699/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102699/",
   "title": "CVE-2026-102699 · xen · fixed in Debian 14 (xen 4.20.4+39-gf1e1321c87-1)",
   "content_text": "Fixed versions: xen 4.20.4+39-gf1e1321c87-1.",
   "date_published": "2026-10-13T15:45:13Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-79610/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-79610/",
   "title": "CVE-2026-79610 · xen · disclosed",
   "content_text": "XSA-501 was about issues with v1 -\u003e v2 and v2 -\u003e v1 changes racing certain\nother grant table operations.  Sadly a v2 -\u003e v1 -\u003e v2 change has yet\nanother effect which wasn't accounted for: During the first change, status\npages would be freed.  During the second change they would be allocated\nagain.  Hence across the full pair of change the addresses of the status\npages may change, rendering stale previously calculated pointers into the\nstatus array.",
   "date_published": "2026-10-13T15:44:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-79610/fixed/alpine-v3.21",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-79610/",
   "title": "CVE-2026-79610 · xen · fixed in Alpine 3.21 (xen 4.19.6-r2)",
   "content_text": "Fixed versions: xen 4.19.6-r2.",
   "date_published": "2026-10-13T15:44:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-79610/fixed/alpine-v3.22",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-79610/",
   "title": "CVE-2026-79610 · xen · fixed in Alpine 3.22 (xen 4.20.4-r2)",
   "content_text": "Fixed versions: xen 4.20.4-r2.",
   "date_published": "2026-10-13T15:44:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-79610/fixed/alpine-v3.23",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-79610/",
   "title": "CVE-2026-79610 · xen · fixed in Alpine 3.23 (xen 4.20.4-r2)",
   "content_text": "Fixed versions: xen 4.20.4-r2.",
   "date_published": "2026-10-13T15:44:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-79610/fixed/alpine-v3.24",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-79610/",
   "title": "CVE-2026-79610 · xen · fixed in Alpine 3.24 (xen 4.21.2-r2)",
   "content_text": "Fixed versions: xen 4.21.2-r2.",
   "date_published": "2026-10-13T15:44:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-79610/fixed/debian-13",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-79610/",
   "title": "CVE-2026-79610 · xen · fixed in Debian 13 (xen 4.20.4+39-gf1e1321c87-0+deb13u1)",
   "content_text": "Fixed versions: xen 4.20.4+39-gf1e1321c87-0+deb13u1.",
   "date_published": "2026-10-13T15:44:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-79610/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-79610/",
   "title": "CVE-2026-79610 · xen · fixed in Debian 14 (xen 4.20.4+39-gf1e1321c87-1)",
   "content_text": "Fixed versions: xen 4.20.4+39-gf1e1321c87-1.",
   "date_published": "2026-10-13T15:44:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-79610/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-79610/",
   "title": "CVE-2026-79610 · xen · fixed in openSUSE Tumbleweed (xen 4.22.0_06-1.1)",
   "content_text": "Fixed versions: xen 4.22.0_06-1.1.",
   "date_published": "2026-10-13T15:44:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-79610/fixed/suse-linux-enterprise-high-performance-computing-15-sp4-espos",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-79610/",
   "title": "CVE-2026-79610 · xen · fixed in SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS (xen 4.16.7_16-150400.4.95.1)",
   "content_text": "Fixed versions: xen 4.16.7_16-150400.4.95.1.",
   "date_published": "2026-10-13T15:44:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-79610/fixed/suse-linux-enterprise-high-performance-computing-15-sp4-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-79610/",
   "title": "CVE-2026-79610 · xen · fixed in SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS (xen 4.16.7_16-150400.4.95.1)",
   "content_text": "Fixed versions: xen 4.16.7_16-150400.4.95.1.",
   "date_published": "2026-10-13T15:44:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-79610/fixed/suse-linux-enterprise-high-performance-computing-15-sp5-espos",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-79610/",
   "title": "CVE-2026-79610 · xen · fixed in SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS (xen 4.17.7_02-150500.3.82.1)",
   "content_text": "Fixed versions: xen 4.17.7_02-150500.3.82.1.",
   "date_published": "2026-10-13T15:44:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-79610/fixed/suse-linux-enterprise-high-performance-computing-15-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-79610/",
   "title": "CVE-2026-79610 · xen · fixed in SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS (xen 4.17.7_02-150500.3.82.1)",
   "content_text": "Fixed versions: xen 4.17.7_02-150500.3.82.1.",
   "date_published": "2026-10-13T15:44:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-79610/fixed/suse-linux-enterprise-micro-5.3",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-79610/",
   "title": "CVE-2026-79610 · xen · fixed in SUSE Linux Enterprise Micro 5.3 (xen 4.16.7_16-150400.4.95.1)",
   "content_text": "Fixed versions: xen 4.16.7_16-150400.4.95.1.",
   "date_published": "2026-10-13T15:44:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-79610/fixed/suse-linux-enterprise-micro-5.4",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-79610/",
   "title": "CVE-2026-79610 · xen · fixed in SUSE Linux Enterprise Micro 5.4 (xen 4.16.7_16-150400.4.95.1)",
   "content_text": "Fixed versions: xen 4.16.7_16-150400.4.95.1.",
   "date_published": "2026-10-13T15:44:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-79610/fixed/suse-linux-enterprise-micro-5.5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-79610/",
   "title": "CVE-2026-79610 · xen · fixed in SUSE Linux Enterprise Micro 5.5 (xen 4.17.7_02-150500.3.82.1)",
   "content_text": "Fixed versions: xen 4.17.7_02-150500.3.82.1.",
   "date_published": "2026-10-13T15:44:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-79610/fixed/suse-linux-enterprise-server-12-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-79610/",
   "title": "CVE-2026-79610 · xen · fixed in SUSE Linux Enterprise Server 12 SP5-LTSS (xen 4.12.4_76-3.154.1)",
   "content_text": "Fixed versions: xen 4.12.4_76-3.154.1.",
   "date_published": "2026-10-13T15:44:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-79610/fixed/suse-linux-enterprise-server-15-sp4-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-79610/",
   "title": "CVE-2026-79610 · xen · fixed in SUSE Linux Enterprise Server 15 SP4-LTSS (xen 4.16.7_16-150400.4.95.1)",
   "content_text": "Fixed versions: xen 4.16.7_16-150400.4.95.1.",
   "date_published": "2026-10-13T15:44:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-79610/fixed/suse-linux-enterprise-server-15-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-79610/",
   "title": "CVE-2026-79610 · xen · fixed in SUSE Linux Enterprise Server 15 SP5-LTSS (xen 4.17.7_02-150500.3.82.1)",
   "content_text": "Fixed versions: xen 4.17.7_02-150500.3.82.1.",
   "date_published": "2026-10-13T15:44:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-79610/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp4",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-79610/",
   "title": "CVE-2026-79610 · xen · fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP4 (xen 4.16.7_16-150400.4.95.1)",
   "content_text": "Fixed versions: xen 4.16.7_16-150400.4.95.1.",
   "date_published": "2026-10-13T15:44:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-79610/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-79610/",
   "title": "CVE-2026-79610 · xen · fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP5 (xen 4.17.7_02-150500.3.82.1)",
   "content_text": "Fixed versions: xen 4.17.7_02-150500.3.82.1.",
   "date_published": "2026-10-13T15:44:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-79610/fixed/suse-linux-enterprise-server-ltss-extended-security-12-sp5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-79610/",
   "title": "CVE-2026-79610 · xen · fixed in SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 (xen 4.12.4_76-3.154.1)",
   "content_text": "Fixed versions: xen 4.12.4_76-3.154.1.",
   "date_published": "2026-10-13T15:44:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-79609/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-79609/",
   "title": "CVE-2026-79609 · xen · disclosed",
   "content_text": "XPTI (Xen Page Table Isolation) was introduced to mitigate Meltdown\n(CVE-2017-5754, one aspect of XSA-254).  This involves copying 64-bit PV\nguest page table entries from guest-chosen root page tables to the Xen-\nchosen one which is in actual use by hardware.  To read the guest root\npage table, the directmap is used.  PV guests, however, have a directmap\nwhich may not cover all memory; in particular this is the case if any\nmemory extends beyond the 5 TiB (CONFIG_BIGMEM=y: 3.5 TiB) address\nboundary.",
   "date_published": "2026-10-13T15:44:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-79609/fixed/alpine-v3.21",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-79609/",
   "title": "CVE-2026-79609 · xen · fixed in Alpine 3.21 (xen 4.19.6-r2)",
   "content_text": "Fixed versions: xen 4.19.6-r2.",
   "date_published": "2026-10-13T15:44:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-79609/fixed/alpine-v3.22",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-79609/",
   "title": "CVE-2026-79609 · xen · fixed in Alpine 3.22 (xen 4.20.4-r2)",
   "content_text": "Fixed versions: xen 4.20.4-r2.",
   "date_published": "2026-10-13T15:44:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-79609/fixed/alpine-v3.23",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-79609/",
   "title": "CVE-2026-79609 · xen · fixed in Alpine 3.23 (xen 4.20.4-r2)",
   "content_text": "Fixed versions: xen 4.20.4-r2.",
   "date_published": "2026-10-13T15:44:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-79609/fixed/alpine-v3.24",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-79609/",
   "title": "CVE-2026-79609 · xen · fixed in Alpine 3.24 (xen 4.21.2-r2)",
   "content_text": "Fixed versions: xen 4.21.2-r2.",
   "date_published": "2026-10-13T15:44:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-79609/fixed/debian-13",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-79609/",
   "title": "CVE-2026-79609 · xen · fixed in Debian 13 (xen 4.20.4+39-gf1e1321c87-0+deb13u1)",
   "content_text": "Fixed versions: xen 4.20.4+39-gf1e1321c87-0+deb13u1.",
   "date_published": "2026-10-13T15:44:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-79609/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-79609/",
   "title": "CVE-2026-79609 · xen · fixed in Debian 14 (xen 4.20.4+39-gf1e1321c87-1)",
   "content_text": "Fixed versions: xen 4.20.4+39-gf1e1321c87-1.",
   "date_published": "2026-10-13T15:44:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-79609/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-79609/",
   "title": "CVE-2026-79609 · xen · fixed in openSUSE Tumbleweed (xen 4.22.0_06-1.1)",
   "content_text": "Fixed versions: xen 4.22.0_06-1.1.",
   "date_published": "2026-10-13T15:44:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-79609/fixed/suse-linux-enterprise-high-performance-computing-15-sp4-espos",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-79609/",
   "title": "CVE-2026-79609 · xen · fixed in SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS (xen 4.16.7_16-150400.4.95.1)",
   "content_text": "Fixed versions: xen 4.16.7_16-150400.4.95.1.",
   "date_published": "2026-10-13T15:44:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-79609/fixed/suse-linux-enterprise-high-performance-computing-15-sp4-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-79609/",
   "title": "CVE-2026-79609 · xen · fixed in SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS (xen 4.16.7_16-150400.4.95.1)",
   "content_text": "Fixed versions: xen 4.16.7_16-150400.4.95.1.",
   "date_published": "2026-10-13T15:44:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-79609/fixed/suse-linux-enterprise-high-performance-computing-15-sp5-espos",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-79609/",
   "title": "CVE-2026-79609 · xen · fixed in SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS (xen 4.17.7_02-150500.3.82.1)",
   "content_text": "Fixed versions: xen 4.17.7_02-150500.3.82.1.",
   "date_published": "2026-10-13T15:44:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-79609/fixed/suse-linux-enterprise-high-performance-computing-15-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-79609/",
   "title": "CVE-2026-79609 · xen · fixed in SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS (xen 4.17.7_02-150500.3.82.1)",
   "content_text": "Fixed versions: xen 4.17.7_02-150500.3.82.1.",
   "date_published": "2026-10-13T15:44:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-79609/fixed/suse-linux-enterprise-micro-5.3",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-79609/",
   "title": "CVE-2026-79609 · xen · fixed in SUSE Linux Enterprise Micro 5.3 (xen 4.16.7_16-150400.4.95.1)",
   "content_text": "Fixed versions: xen 4.16.7_16-150400.4.95.1.",
   "date_published": "2026-10-13T15:44:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-79609/fixed/suse-linux-enterprise-micro-5.4",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-79609/",
   "title": "CVE-2026-79609 · xen · fixed in SUSE Linux Enterprise Micro 5.4 (xen 4.16.7_16-150400.4.95.1)",
   "content_text": "Fixed versions: xen 4.16.7_16-150400.4.95.1.",
   "date_published": "2026-10-13T15:44:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-79609/fixed/suse-linux-enterprise-micro-5.5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-79609/",
   "title": "CVE-2026-79609 · xen · fixed in SUSE Linux Enterprise Micro 5.5 (xen 4.17.7_02-150500.3.82.1)",
   "content_text": "Fixed versions: xen 4.17.7_02-150500.3.82.1.",
   "date_published": "2026-10-13T15:44:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-79609/fixed/suse-linux-enterprise-server-12-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-79609/",
   "title": "CVE-2026-79609 · xen · fixed in SUSE Linux Enterprise Server 12 SP5-LTSS (xen 4.12.4_76-3.154.1)",
   "content_text": "Fixed versions: xen 4.12.4_76-3.154.1.",
   "date_published": "2026-10-13T15:44:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-79609/fixed/suse-linux-enterprise-server-15-sp4-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-79609/",
   "title": "CVE-2026-79609 · xen · fixed in SUSE Linux Enterprise Server 15 SP4-LTSS (xen 4.16.7_16-150400.4.95.1)",
   "content_text": "Fixed versions: xen 4.16.7_16-150400.4.95.1.",
   "date_published": "2026-10-13T15:44:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-79609/fixed/suse-linux-enterprise-server-15-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-79609/",
   "title": "CVE-2026-79609 · xen · fixed in SUSE Linux Enterprise Server 15 SP5-LTSS (xen 4.17.7_02-150500.3.82.1)",
   "content_text": "Fixed versions: xen 4.17.7_02-150500.3.82.1.",
   "date_published": "2026-10-13T15:44:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-79609/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp4",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-79609/",
   "title": "CVE-2026-79609 · xen · fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP4 (xen 4.16.7_16-150400.4.95.1)",
   "content_text": "Fixed versions: xen 4.16.7_16-150400.4.95.1.",
   "date_published": "2026-10-13T15:44:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-79609/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-79609/",
   "title": "CVE-2026-79609 · xen · fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP5 (xen 4.17.7_02-150500.3.82.1)",
   "content_text": "Fixed versions: xen 4.17.7_02-150500.3.82.1.",
   "date_published": "2026-10-13T15:44:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-79609/fixed/suse-linux-enterprise-server-ltss-extended-security-12-sp5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-79609/",
   "title": "CVE-2026-79609 · xen · fixed in SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 (xen 4.12.4_76-3.154.1)",
   "content_text": "Fixed versions: xen 4.12.4_76-3.154.1.",
   "date_published": "2026-10-13T15:44:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-79608/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-79608/",
   "title": "CVE-2026-79608 · xen · disclosed",
   "content_text": "The workaround for XSA-433 (Zenbleed, CVE-2023-20593) was later\nre-worked to better integrate with other manipulations of the same MSR.\nIn this rework an inverted conditional was introduced, resulting in the\nworkaround to not be applied when needed and vice versa.\n\nFor more details, see:\n  http://xenbits.xen.org/xsa/advisory-433.html",
   "date_published": "2026-10-13T15:44:08Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-79608/fixed/alpine-v3.21",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-79608/",
   "title": "CVE-2026-79608 · xen · fixed in Alpine 3.21 (xen 4.19.6-r2)",
   "content_text": "Fixed versions: xen 4.19.6-r2.",
   "date_published": "2026-10-13T15:44:08Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-79608/fixed/alpine-v3.22",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-79608/",
   "title": "CVE-2026-79608 · xen · fixed in Alpine 3.22 (xen 4.20.4-r2)",
   "content_text": "Fixed versions: xen 4.20.4-r2.",
   "date_published": "2026-10-13T15:44:08Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-79608/fixed/alpine-v3.23",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-79608/",
   "title": "CVE-2026-79608 · xen · fixed in Alpine 3.23 (xen 4.20.4-r2)",
   "content_text": "Fixed versions: xen 4.20.4-r2.",
   "date_published": "2026-10-13T15:44:08Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-79608/fixed/alpine-v3.24",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-79608/",
   "title": "CVE-2026-79608 · xen · fixed in Alpine 3.24 (xen 4.21.2-r2)",
   "content_text": "Fixed versions: xen 4.21.2-r2.",
   "date_published": "2026-10-13T15:44:08Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-79608/fixed/debian-13",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-79608/",
   "title": "CVE-2026-79608 · xen · fixed in Debian 13 (xen 4.20.4+39-gf1e1321c87-0+deb13u1)",
   "content_text": "Fixed versions: xen 4.20.4+39-gf1e1321c87-0+deb13u1.",
   "date_published": "2026-10-13T15:44:08Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-79608/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-79608/",
   "title": "CVE-2026-79608 · xen · fixed in Debian 14 (xen 4.20.4+39-gf1e1321c87-1)",
   "content_text": "Fixed versions: xen 4.20.4+39-gf1e1321c87-1.",
   "date_published": "2026-10-13T15:44:08Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-79608/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-79608/",
   "title": "CVE-2026-79608 · xen · fixed in openSUSE Tumbleweed (xen 4.22.0_06-1.1)",
   "content_text": "Fixed versions: xen 4.22.0_06-1.1.",
   "date_published": "2026-10-13T15:44:08Z"
  }
 ]
}