CVE Catalog
CVE-2026-23556
CriticalCVSS 9.4Summary
When oxenstored tears down a domain, node data is cleaned up but usage counts are leaked. When the domain ID is reused, the new domain can create fewer nodes before being deemed over quota.
Risk Assessment
The risk is gradual exhaustion of node limits for new domains, potentially leading to denial of service (DoS) for newly created domains in the Xen system.
Recommendation
It is recommended to update Xen software to a version containing a fix for the usage count leak in oxenstored. Monitor security patches for the deployed version.
Original NVD description (English source)
When oxenstored is tearing a domain down, the node data is cleaned up but the usage counts are leaked. When the domain ID is eventually reused, the new domain can create fewer nodes before beeing deemed to be over quota.