Vulnerability Report

CVE-2026-23555

Title: Xenstored Crash via Illegal Node Path

Other

Proof Of Concept

No public PoC currently indexed for CVE-2026-23555.

CWE Category NVD-CWE-noinfo

Published Date Mar 23, 2026

Modified Date Apr 10, 2026

Exploit Status Not Found

Score 7.1 CVSS v

Exploit Probability (EPSS)

0.18%

Vulnerability Summary

CVE-2026-23555: Any guest issuing a Xenstore command accessing a node using the (illegal) node path "/local/domain/", will crash xenstored due to a clobbered error indicator in xenstored when verifying the node path. Note that the crash is forced via a failing assert() statement in xenstored. In case xenstored is being built with NDEBUG #defined, an unprivileged guest trying to access the node path "/local/domain/" will result in it no longer being serviced by xenstored, other guests (including dom0) will still be serviced, but xenstored will use up all cpu time it can get.

Impacted Vendors

xensource_inc 1

xen 1

Reference Links

https://xenbits.xenproject.org/xsa/advisory-481.html

CVSS v3.1

Source Entity [email protected]

Severity HIGH

7.1

Attack Vector

LOCAL

Complexity

LOW

Privileges

N/A

Interaction

NONE

Confidentiality

N/A

Integrity

N/A

Availability

N/A

Scope

CHANGED

RAW VECTOR CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H