{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"xen","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":[],"id":"tcs_01M5NT8KMHTDXTFWFQMH2SW3VN","modified_at":"2026-10-21T23:00:08.762748164Z","published_at":"2026-09-08T13:17:19.623Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2026-62437","https://security-tracker.debian.org/tracker/CVE-2026-62437"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2026-62437","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2026-62437"}],"summary":"When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated removal of tracking structures for IRQs used b"}