CVE-2026-62431

Summary

The logic to handle periodic Viridian STIMERs performs a division with an unchecked user-controlled divisor value, that can be set to zero to cause a #DE fault.

Affected Software

Weaknesses

Workarounds

Not enabling Viridian STIMERs for HVM guests will avoid the vulnerability.

Note Viridian extensions are not enabled by default.

ADP Enrichment

CVE Program Container

Additional References

• http://xenbits.xen.org/xsa/advisory-504.html
• http://www.openwall.com/lists/oss-security/2026/07/28/20

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

References

• https://xenbits.xenproject.org/xsa/advisory-504.html

• ←Previous
• Next→