CERT-FR: Multiple Xen Vulnerabilities Disclosed

CERT-FR Security Advisories

Published March 17th, 2026

Detected March 17th, 2026

Summary

CERT-FR has issued a security advisory regarding multiple vulnerabilities discovered in Xen versions 4.17.x and 4.18.x. These vulnerabilities could lead to data breaches, remote denial of service, and privilege escalation. Users are advised to apply security patches provided by Xen.

View original document View source feed page

What changed

CERT-FR has released an advisory (CERTFR-2026-AVI-0304) detailing multiple critical vulnerabilities in Xen hypervisor versions 4.17.x and 4.18.x, specifically those lacking security patches xsa480.patch and xsa481.patch respectively. The disclosed vulnerabilities (CVE-2026-23554, CVE-2026-23555) pose significant risks, including remote denial of service, privilege escalation, and data confidentiality breaches.

Organizations utilizing affected Xen versions must immediately consult the Xen security bulletins and apply the necessary patches to mitigate these risks. Failure to do so could result in severe security incidents, including unauthorized access to sensitive data and disruption of services. The advisory directs users to the Xen project's security advisories for detailed patch information.

What to do next

Apply security patches xsa480.patch and xsa481.patch to affected Xen versions
Consult Xen security bulletins for detailed remediation steps

Source document (simplified)

Premier Ministre S.G.D.S.N

Agence nationale
de la sécurité des
systèmes d'information

Paris, le 17 mars 2026 N° CERTFR-2026-AVI-0304 Affaire suivie par: CERT-FR

Avis du CERT-FR

Objet: Multiples vulnérabilités dans Xen

Gestion du document

Risques

Atteinte à la confidentialité des données
Déni de service à distance
Élévation de privilèges

Systèmes affectés

Xen versions 4.17.x sans le correctif de sécurité xsa480.patch
Xen versions 4.18.x sans le correctif de sécurité xsa481.patch

Résumé

De multiples vulnérabilités ont été découvertes dans Xen. Elles permettent à un attaquant de provoquer une élévation de privilèges, un déni de service à distance et une atteinte à la confidentialité des données.