Medium severity5.3NVD Advisory· Published Jul 28, 2026· Updated Jul 28, 2026

CVE-2026-62434

Description

A guest started with Populated on Demand enabled (PoD) can attempt to reclaim pages which aren't regular guest RAM. This can cause corruption of memory management state in Xen.

Affected products

Debian/xenllm-fuzzy
osv-coords
pkg:rpm/opensuse/xen&distro=openSUSE%20Tumbleweed
Range: < 4.22.0_02-1.1

Patches

Vulnerability mechanics

References

www.openwall.com/lists/oss-security/2026/07/28/23nvd
xenbits.xen.org/xsa/advisory-507.htmlnvd
xenbits.xenproject.org/xsa/advisory-507.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000