CVE-2026-72380

xen/pvcalls: bound backend response req_id before indexing rsp[]

References

Notes


      
Bugs

      
      
Status

      

	

	  Branch
	  Status
	

	
	

	  upstream
	  
	    
	    
	    released (7.2-rc2) [d33846c8dcc06b83b7acdeac1e8bfbb5c0c26cb2]
	    
	  
	

	
	

	  7.2-upstream-stable
	  
	    
	    
	    N/A "Fixed before branching point"
	    
	  
	

	
	

	  7.1-upstream-stable
	  
	    
	    
	    released (7.1.5) [d1297a9e2fd6ce08678b370d41bc980ca798f809]
	    
	  
	

	
	

	  6.18-upstream-stable
	  
	    
	    
	    needed
	    
	  
	

	
	

	  6.12-upstream-stable
	  
	    
	    
	    needed
	    
	  
	

	
	

	  6.6-upstream-stable
	  
	    
	    
	    needed
	    
	  
	

	
	

	  6.1-upstream-stable
	  
	    
	    
	    needed
	    
	  
	

	
	

	  5.10-upstream-stable
	  
	    
	    
	    needed
	    
	  
	

	
	

	  sid
	  
	    
	    
	    released (7.1.5-1)
	    
	  
	

	
	

	  6.12-trixie-security
	  
	    
	    
	    needed
	    
	  
	

	
	

	  6.1-bookworm-security
	  
	    
	    
	    needed
	    
	  
	

	
	

	  5.10-bullseye-security
	  
	    
	    
	    needed