What is CVE-2026-62430?

CVE-2026-62430 is a high-severity vulnerability in Xen, classified under Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition). CVSS score: 7.5/10. Published 2026-07-28.

How severe is CVE-2026-62430?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Xen

CVE-2026-62430

Accesses to the CMOS memory contents are done using an indirect IO port pair. Therefore Xen needs to cache the guest chosen index, and one of the usages of the index didn't take the necessary locking to avoid concurrent changes. As a res…

Vulnerability class: Race Condition

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Xen — versions consult Xen advisory XSA-503

Weakness classification (CWE)

CWE-362 — Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition)

References

security@xen.org
af854a3a-2127-422b-91ae-364da2661108
af854a3a-2127-422b-91ae-364da2661108

Frequently asked questions

What is CVE-2026-62430?: CVE-2026-62430 is a high-severity vulnerability in Xen, classified under Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition). CVSS score: 7.5/10. Published 2026-07-28.
How severe is CVE-2026-62430?: High severity. CVSS v3 base score is 7.5 out of 10.