Nixpkgs security tracker

Login with GitHub
⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestion detail

Untriaged
Permalink CVE-2026-62428
7.8 HIGH
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Local (L)
  • Attack Complexity (AC): High (H)
  • Privileges Required (PR): Low (L)
  • User Interaction (UI): None (N)
  • Scope (S): Changed (C)
  • Confidentiality (C): High (H)
  • Integrity (I): High (H)
  • Availability (A): High (H)
  • Modified Attack Vector (MAV): Local (L)
  • Modified Attack Complexity (MAC): High (H)
  • Modified Privileges Required (MPR): Low (L)
  • Modified User Interaction (MUI): None (N)
  • Modified Confidentiality (MC): High (H)
  • Modified Scope (MS): Changed (C)
  • Modified Integrity (MI): High (H)
  • Modified Availability (MA): High (H)
created 1 month ago Activity log
  • Created suggestion 1 month ago
grant-table: type confusion in grant-copy

When grant-copy operations are processed, the respective grant may or may not already be in use by another operation (a mapping or another copy). For all copy operations the referenced guest frame is looked up. When another operation is already active for the grant (the grant is "pinned"), what is being supplied back to actually carry out permission checks and copy operation may not be consistent: The permission check may be carried out on a page different from the one involved in the copy.

Affected products

Xen
  • ==consult Xen advisory XSA-500

Matching in nixpkgs

pkgs.xen

Type-1 hypervisor intended for embedded and hyperscale use cases

  • nixos-unstable -
  • nixos-26.05 -

pkgs.xenon

Monitoring tool based on radon

  • nixos-unstable -
    • nixos-unstable-small 0.9.3
  • nixos-26.05 -
    • nixos-26.05-small 0.9.3

pkgs.hhexen

Linux port of Raven Game's Hexen

  • nixos-unstable -
    • nixos-unstable-small 1.6.4
  • nixos-26.05 -
    • nixos-26.05-small 1.6.4

pkgs.uhexen2

Cross-platform port of Hexen II game

  • nixos-unstable -
    • nixos-unstable-small 1.5.9
  • nixos-26.05 -
    • nixos-26.05-small 1.5.9

pkgs.OVMF-xen

Sample UEFI firmware for Xen guests

  • nixos-unstable -
  • nixos-26.05 -

pkgs.qemu_xen

Generic and open source machine emulator and virtualizer

  • nixos-unstable -
  • nixos-26.05 -

pkgs.xenomapper

Utility for post processing mapped reads that have been aligned to a primary genome and a secondary genome and binning reads into species specific, multimapping in each species, unmapped and unassigned bins

  • nixos-unstable -
    • nixos-unstable-small 1.0.2
  • nixos-26.05 -
    • nixos-26.05-small 1.0.2

pkgs.nxengine-evo

Complete open-source clone/rewrite of the masterpiece jump-and-run platformer Doukutsu Monogatari (also known as Cave Story)

  • nixos-unstable -
  • nixos-26.05 -

pkgs.grub2_pvgrub_image

PvGrub2 image for booting PV Xen guests

  • nixos-unstable -
    • nixos-unstable-small
  • nixos-26.05 -
    • nixos-26.05-small

pkgs.grub2_pvhgrub_image

PvGrub2 image for booting PVH Xen guests

  • nixos-unstable -
    • nixos-unstable-small
  • nixos-26.05 -
    • nixos-26.05-small

pkgs.haskellPackages.xeno

A fast event-based XML parser in pure Haskell

  • nixos-unstable -
    • nixos-unstable-small 0.6
  • nixos-26.05 -
    • nixos-26.05-small 0.6

pkgs.python313Packages.xen

Type-1 hypervisor intended for embedded and hyperscale use cases

  • nixos-unstable -
  • nixos-26.05 -

pkgs.python314Packages.xen

Type-1 hypervisor intended for embedded and hyperscale use cases

  • nixos-unstable -
  • nixos-26.05 -

pkgs.ocamlPackages.mirage-net-xen

Network device for reading and writing Ethernet frames via then Xen netfront/netback protocol

  • nixos-unstable -
    • nixos-unstable-small 2.1.3
  • nixos-26.05 -
    • nixos-26.05-small 2.1.3

pkgs.python313Packages.pylatexenc

Simple LaTeX parser providing latex-to-unicode and unicode-to-latex conversion

  • nixos-unstable -
    • nixos-unstable-small 2.10
  • nixos-26.05 -
    • nixos-26.05-small 2.10

pkgs.python314Packages.pylatexenc

Simple LaTeX parser providing latex-to-unicode and unicode-to-latex conversion

  • nixos-unstable -
    • nixos-unstable-small 2.10
  • nixos-26.05 -
    • nixos-26.05-small 2.10