This page tracks the Alpine Linux fix status. The vulnerability itself is described on the main CVE page.
View CVE-2026-79603 →
ALPINE-CVE-2026-79603
x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to them. A TLB flush is only issued by Xen (if needed) when the pa...
Original description
The description as published by the source.
x86 PV guests can free memory pages while still keeping a stale TLB entry
pointing to them. A TLB flush is only issued by Xen (if needed) when the
page is re-used. Since it's possible for the page to be scrubbed ahead of
the TLB flush, there's a window where a PV guest can modify an already
scrubbed page.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Alpine:v3.21
xen
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.6-r1"}]}]
Alpine:v3.22
xen
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20.4-r1"}]}]
Alpine:v3.23
xen
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20.4-r1"}]}]
Alpine:v3.24
xen
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.2-r1"}]}]
References
- advisory security.alpinelinux.org