Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-62437

x86: DMs may cause mem leak by IRQ binding

cve-program · severity unknownCVSS unknownCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-62437

Published

When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated removal of tracking structures for IRQs used by the devices occurs relatively early in the process. Unfortunately after that point the guest about to be terminated could cause its device model (DM) to re-establish such tracking structures, by having it bind one or more IRQs anew. While some of those tracking structures would still be cleaned up later on, at least one would not be.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-62437

Published

Xen

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "defaultStatus": "unknown",
                    "product": "Xen",
                    "vendor": "Xen",
                    "versions": [
                        {
                            "status": "unknown",
                            "version": "consult Xen advisory XSA-509"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON