High severity7.3NVD Advisory· Published Jul 28, 2026· Updated Jul 28, 2026

CVE-2026-62433

Description

Parts of the DM_OP handling code assumes the caller has provided the required number of buffers for the given operation without any checking being done. As a result, certain operations might access stack rubble as structures are possibly uninitialized.

Affected products

Debian/xenllm-create
osv-coords
pkg:rpm/opensuse/xen&distro=openSUSE%20Tumbleweed
Range: < 4.22.0_02-1.1

Patches

Vulnerability mechanics

References

www.openwall.com/lists/oss-security/2026/07/28/22nvd
xenbits.xen.org/xsa/advisory-506.htmlnvd
xenbits.xenproject.org/xsa/advisory-506.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.474
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000