Home / mailings [SECURITY] [DSA 6424-1] xen security update
Posted on 09 August 2026
Debian Security Advisory- -------------------------------------------------------------------------
Debian Security Advisory DSA-6424-1 security@debian.org
https://www.debian.org/security/ Moritz Muehlenhoff
August 09, 2026 https://www.debian.org/security/faq
- -------------------------------------------------------------------------
Package : xen
CVE ID : CVE-2025-10263 CVE-2025-54505 CVE-2025-54518 CVE-2026-23554
CVE-2026-23555 CVE-2026-23556 CVE-2026-23557 CVE-2026-23558
CVE-2026-42487 CVE-2026-42488 CVE-2026-42489 CVE-2026-42490
CVE-2026-42493 CVE-2026-42494 CVE-2026-42495 CVE-2026-62423
CVE-2026-62424 CVE-2026-62425 CVE-2026-62426 CVE-2026-62427
CVE-2026-62428 CVE-2026-62429 CVE-2026-62430 CVE-2026-62431
CVE-2026-62432 CVE-2026-62433 CVE-2026-62434 CVE-2026-62435
CVE-2026-62436
Multiple vulnerabilities have been discovered in the Xen hypervisor,
which could result in privilege escalation, information disclosure or
denial of service.
For the stable distribution (trixie), these problems have been fixed in
version 4.20.3+127-gc42374a105-0+deb13u1.
We recommend that you upgrade your xen packages.
For the detailed security status of xen please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/xen
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/
Mailing list: debian-security-announce@lists.debian.org
