CVE-2026-42488

Description

Some shadow paging errors paths will switch the page-tables without updating the currently running vCPU reference. This causes a mismatch between the loaded page-tables and the mapcache metadata which can lead to corruption of the mapcache.

PUBLISHED Reserved 2026-04-27 | Published 2026-06-18 | Updated 2026-06-18 | Assigner XEN

Product status

Credits

This issue was discovered by Roger Pau Monné of XenServer. finder

References

xenbits.xen.org/xsa/advisory-494.html

www.openwall.com/lists/oss-security/2026/06/09/14

xenbits.xenproject.org/xsa/advisory-494.html

cve.org (CVE-2026-42488)

nvd.nist.gov (CVE-2026-42488)

Download JSON