CVE-2026-79608

Awaiting Analysis Awaiting Analysis - Queue

Zenbleed Workaround Logic Error in Xen

Publication date: 2026-10-13

Last updated on: 2026-10-20

Assigner: Xen Project

Description

The workaround for XSA-433 (Zenbleed, CVE-2023-20593) was later re-worked to better integrate with other manipulations of the same MSR. In this rework an inverted conditional was introduced, resulting in the workaround to not be applied when needed and vice versa. For more details, see: http://xenbits.xen.org/xsa/advisory-433.html

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-13

Last Modified

2026-10-20

Generated

2026-11-08

AI Q&A

2026-10-13

EPSS Evaluated

2026-11-07

NVD

CVE-2026-79608

EUVD

EUVD-2026-98824

Affected Vendors & Products

Vendor	Product	Version / Range
xen	xen	*
xen	xen	From 4.19.4 (inc)
xen	xen	From 4.20.3 (inc)
xen	xen	From 4.21.1 (inc)
xen	xen	4.22

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-670	The code contains a control flow path that does not reflect the algorithm that the path is intended to implement, leading to incorrect behavior any time this path is navigated.

Attack-Flow Graph

Executive Summary

This vulnerability is a flaw in Xen's workaround for the Zenbleed vulnerability (CVE-2023-20593). The original workaround was revised to better integrate with other manipulations of the same MSR (Model-Specific Register). However, an inverted conditional in the rework caused the workaround to either not apply when needed or apply incorrectly. This allows attackers to read sensitive data from different contexts on the same CPU core, such as cryptographic keys or memory contents.

Detection Guidance

Detection requires checking if your Xen version is affected and if AMD Zen2 microcode is outdated. Verify Xen version with `xl info | grep xen_version` and check microcode with `dmesg | grep microcode`. If using affected versions (4.19.4+, 4.20.3+, 4.21.1+, 4.22) and AMD Zen2, the system is likely vulnerable.

Impact Analysis

This vulnerability allows attackers to read sensitive data from your system, including cryptographic keys, plaintext, or memory contents from operations like memcpy(). It specifically affects systems running outdated AMD Zen2 microcode. Attackers could exploit this to steal confidential information or compromise system security.

Compliance Impact

This vulnerability allows attackers to read sensitive data from different contexts on the same core, such as cryptographic keys, plaintext, or memory contents. This could lead to unauthorized access to personal or health information, potentially violating GDPR and HIPAA compliance requirements for data protection and confidentiality.

Mitigation Strategies

Apply the provided patch to correct the inverted conditional in Xen's workaround for Zenbleed.
Alternatively, disable AVX via Xen's boot parameter `cpuid=no-avx` or disable AVX in untrusted VMs with `cpuid="host:avx=0"`.
Update to the latest stable Xen release before applying patches if necessary.

Hi! I’m here to help you understand CVE-2026-79608. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...