This page tracks the Alpine Linux fix status. The vulnerability itself is described on the main CVE page. View CVE-2026-42493 →

ALPINE-CVE-2026-42493

Addressing certain issues, in particular related to operations which may take excessively long and therefore would need preemption, has turned out ove...

Original description

The description as published by the source.

Addressing certain issues, in particular related to operations which may
take excessively long and therefore would need preemption, has turned out
overly costly. Since alternatives (HVM/PVH: HAP, PV: shim) are commonly
available, the decision was to deprecate the functionality, while still
retaining it for people to use at their own (security) risk. Memory-wise
small enough guests may still be okay to run.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Alpine:v3.21 xen

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.6-r0"}]}]

Alpine:v3.22 xen

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20.4-r0"}]}]

Alpine:v3.23 xen

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20.4-r0"}]}]

Alpine:v3.24 xen

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.2-r0"}]}]

References

advisory security.alpinelinux.org