DEBIAN-CVE-2026-79608
- Source
- https://security-tracker.debian.org/tracker/CVE-2026-79608
- Import Source
- https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-79608.json
- JSON Data
- https://api.osv.dev/v1/vulns/DEBIAN-CVE-2026-79608
- Upstream
- CVE-2026-79608
- Published
- 2026-10-13T16:17:23Z
- Modified
- 2026-10-14T06:00:24Z
- Summary
- [none]
- Details
-
The workaround for XSA-433 (Zenbleed, CVE-2023-20593) was later re-worked to better integrate with other manipulations of the same MSR. In this rework an inverted conditional was introduced, resulting in the workaround to not be applied when needed and vice versa. For more details, see: http://xenbits.xen.org/xsa/advisory-433.html
- References
Affected packages
Debian:12 / xen
Package
- Name
- xen
- Purl
- pkg:deb/debian/xen?arch=source&distro=bookworm
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affected
Affected versions
4.*
4.17.1+2-gb773c48e36-1
4.17.2-1
4.17.2+55-g0b56bed864-1
4.17.2+76-ge1f9cb16e2-1~deb12u1
4.17.2+76-ge1f9cb16e2-1
4.17.3+10-g091466ba55-1~deb12u1
4.17.3+10-g091466ba55-1
4.17.3+10-g091466ba55-1.1~exp1
4.17.3+10-g091466ba55-1.1~exp2
4.17.3+10-g091466ba55-1.1
4.17.3+36-g54dacb5c02-1
4.17.5+23-ga4e5191dc0-1
4.17.5+23-ga4e5191dc0-1+deb12u1
4.17.5+72-g01140da4e8-1
4.17.7-0+deb12u1
4.19.0+14-g0918434e0f-1~exp1
4.19.1-1~exp1
4.19.1-1~exp4
4.19.1-1
4.20.0~rc2+1-gfcde5e0de8-1~exp1
4.20.0-1
4.20.0+68-g35cb38b222-1
4.20.2+7-g1badcf5035-1
4.20.2+7-g1badcf5035-2
4.20.2+37-g61ff35323e-1
4.20.3+127-gc42374a105-1
Debian:13 / xen
Package
- Name
- xen
- Purl
- pkg:deb/debian/xen?arch=source&distro=trixie
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affected
Debian:14 / xen
Package
- Name
- xen
- Purl
- pkg:deb/debian/xen?arch=source&distro=forky
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affected