CVE-2026-79607
Published Oct 13, 2026
Modified Oct 13, 2026
Description
During Xenstore live update the state record for a Xenstore watch with specified watch depth is written with two bytes missing. This results in an inconsistent state when reading the state back in the new Xenstore, causing a crash of Xenstore or wrong Xenstore data.
Is your site exposed to CVE-2026-79607?
Run a free security scan — no signup, results in seconds.
References
Frequently Asked Questions
What is CVE-2026-79607? +
During Xenstore live update the state record for a Xenstore watch with
specified watch depth is written with two bytes missing. This results
in an inconsistent state when reading the state back in the new Xenstore,
causing a crash of Xenstore or wrong Xenstore data.
How do I check if I'm vulnerable to CVE-2026-79607? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.