CVE-2026-42487Disclosure

LOWCVSS 7.9 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

HVM guest I/O port accesses are subject to either emulation or at least translation. Translations are managed by the device model (via XEN_DOMCTL_ioport_mapping), and hence the linked list used may changed at any time. Traversal of those lists (while handling guest I/O port accesses) therefore needs synchronizing with updates, which was missing so far.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-362

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Patch or workaround signal is available
4 mentions across 4 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 2 signals
Technical details provided in 4 signals
Disclosure: 2 classified signals
Peaked 3d ago at 1 mentions (2026-06-09); latest day: 1
4 total mentions across 4 days

Deep dive

Activity timeline4 mentions / 4d

Signal classification2 categories

Disclosure

250.0%

Patch

250.0%

Referenced assets8 URLs

By indicator

Classification over time

Date	Total	Labels

2026-06-09	1	Disclosure1
2026-06-10	1	Patch1
2026-06-18	1	Disclosure1
2026-06-24	1	Patch1

Full discourse4 posts

Anderson Nascimento@andersonc0d3137d
Disclosure
Xen Security Advisory 491 v2 (CVE-2026-42487) - x86 HVM I/O port list traversal https://seclists.org/oss-sec/2026/q2/857 Xen Security Advisory 492 v3 (CVE-2026-42489,CVE-2026-42490) - domctl lock open to abuse https://seclists.org/oss-sec/2026/q2/858 Xen Security Advisory 493 v2 (CVE-2025-10263) - Arm: Completion of memory accesses not guaranteed by completion of a TLBI https://seclists.org/oss-sec/2026/q2/859 Xen Security Advisory 494 v3 (CVE-2026-42488) - x86: mismatched mapcache metadata https://seclists.org/oss-sec/2026/q2/860
Post summary
The snippet reports four Xen Security Advisories that disclose four CVEs with technical details, but provides no evidence of PoCs, active exploitation, or patches.
010143797
4.2K followersView on X
Open Source Security mailing list@oss_security128d
Disclosure
Xen Security Advisory 491 v2 (CVE-2026-42487) - x86 HVM I/O port list traversal https://www.openwall.com/lists/oss-security/2026/06/09/11 492 v3 (CVE-2026-42489,CVE-2026-42490) - domctl lock open to abuse https://www.openwall.com/lists/oss-security/2026/06/09/12
Post summary
The message announces disclosures of three Xen CVEs, providing minimal technical descriptions but no PoC, exploit, or patch details.
10041366
4.7K followersView on X
Ferramentas Linux@Cezar_H_Linux121d
Patch
SUSE-SU-2026:2613-1: 5 CVEs no Xen hypervisor, incluindo CVE-2025-54518 (AMD Zen 2 cache corruption) e CVE-2026-42487 (HVM I/O port traversal). Saiba mais: -> http://tinyurl.com/28ukjuz3 #SUSE https://t.co/AeDxCWV6aA
Post summary
SUSE released advisory SUSE-SU-2026:2613-1 for five CVEs affecting the Xen hypervisor, providing a link to patch details and describing the technical issues such as cache corruption and I/O port traversal.
1000091
1.5K followersView on X
ThreatCluster@threatcluster135d
Patch
openSUSE released Xen security fixes for CVE-2026-42487, CVE-2026-42488, CVE-2026-42489 and CVE-2026-42490, with CVSS scores up to 8.8, according to advisories SUSE-2026-2328 and SUSE-2026-2329. https://threatcluster.io/cluster/opensuse-releases-important-xen-patches-for-multiple-vulnera-d10510c8
Post summary
The text announces that openSUSE has issued Xen patches for four CVEs, providing CVSS scores and referencing advisories but contains no PoC, exploit, or active exploitation claims.
0000048
318 followersView on X

Explore more

Back to dashboard

What researchers are saying

CVE-2026-42487

Anderson Nascimento[verified]@andersonc0d3Disclosure

The snippet reports four Xen Security Advisories that disclose four CVEs with technical details, but provides no evidence of PoCs, active exploitation, or patches.

ThreatCluster[verified]@threatclusterPatch

The text announces that openSUSE has issued Xen patches for four CVEs, providing CVSS scores and referencing advisories but contains no PoC, exploit, or active exploitation claims.

Open Source Security mailing list@oss_securityDisclosure

The message announces disclosures of three Xen CVEs, providing minimal technical descriptions but no PoC, exploit, or patch details.

Ferramentas Linux@Cezar_H_LinuxPatch

SUSE released advisory SUSE-SU-2026:2613-1 for five CVEs affecting the Xen hypervisor, providing a link to patch details and describing the technical issues such as cache corruption and I/O port traversal.