This page tracks the Alpine Linux fix status. The vulnerability itself is described on the main CVE page. View CVE-2026-79608 →

ALPINE-CVE-2026-79608

The workaround for XSA-433 (Zenbleed, CVE-2023-20593) was later re-worked to better integrate with other manipulations of the same MSR. In this rework...

Original description

The description as published by the source.

The workaround for XSA-433 (Zenbleed, CVE-2023-20593) was later
re-worked to better integrate with other manipulations of the same MSR.
In this rework an inverted conditional was introduced, resulting in the
workaround to not be applied when needed and vice versa.

For more details, see:
http://xenbits.xen.org/xsa/advisory-433.html

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Alpine:v3.21 xen

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.6-r2"}]}]

Alpine:v3.22 xen

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20.4-r2"}]}]

Alpine:v3.23 xen

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20.4-r2"}]}]

Alpine:v3.24 xen

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.2-r2"}]}]

References

advisory security.alpinelinux.org