{"action":"Upgrade xen to 4.20.3+127-gc42374a105-1 or later.","affected":[{"fixed":"4.20.3+127-gc42374a105-1","introduced":"0"}],"component":"xen","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["4.20.3+127-gc42374a105-1"],"id":"tcs_01M5NR3WYZPJ7SVN2359EVRGS4","modified_at":"2026-10-04T22:00:07.942546353Z","published_at":"2026-03-23T07:16:07.200Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2026-23554","https://security-tracker.debian.org/tracker/CVE-2026-23554"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2026-23554#Debian:14/xen","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2026-23554"}],"summary":"The Intel EPT paging code uses an optimization to defer flushing of any cached EPT state until the p2m lock is dropped, so that multiple modifications done under the same locked region only issue a si"}