Xen vulnerabilities and fixes

CVEs that mention Xen, ranked by priority. 2 tracked.

Xen has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2026-10-23. Highest priority: CVE-2026-98900 (score 8/100).

• CVE-2026-98900 HIGH n/a In the Linux kernel, the following vulnerability has been resolved: xen/gntalloc: validate grant count before
• CVE-2026-99057 HIGH n/a In the Linux kernel, the following vulnerability has been resolved: xen/netfront: don't leak the skb when xen

FAQ

How do I fix Xen vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is Xen being exploited right now?

None of the tracked Xen CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which Xen CVE should I patch first?

CVE-2026-98900 currently ranks highest (8/100): In the Linux kernel, the following vulnerability has been resolved: xen/gntalloc: validate grant count before.

← Back to latest CVEs