---
id: CVE-2026-79610
title: |-
  XSA-501 was about issues with v1 -> v2 and v2 -> v1 changes racing certain
  other grant table operations
summary: |-
  XSA-501 was about issues with v1 -> v2 and v2 -> v1 changes racing certain
  other grant table operations.  Sadly a v2 -> v1 -> v2 change has yet
  another effect which wasn't accounted for: During the first change, status
  pages would be fre…
severity: none
published: '2026-10-13'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T16:10:14.750'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-79610'
references:
  - url: 'https://xenbits.xenproject.org/xsa/advisory-517.html'
    label: security@xen.org
  - url: 'http://www.openwall.com/lists/oss-security/2026/10/13/6'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://xenbits.xen.org/xsa/advisory-517.html'
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
ingestedAt: '2026-10-13T16:35:46.745Z'
---

## Overview

XSA-501 was about issues with v1 -> v2 and v2 -> v1 changes racing certain
other grant table operations.  Sadly a v2 -> v1 -> v2 change has yet
another effect which wasn't accounted for: During the first change, status
pages would be freed.  During the second change they would be allocated
again.  Hence across the full pair of change the addresses of the status
pages may change, rendering stale previously calculated pointers into the
status array.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.