{"action":"Upgrade xen to 4.20.4+39-gf1e1321c87-0+deb13u1 or later.","affected":[{"fixed":"4.20.4+39-gf1e1321c87-0+deb13u1","introduced":"0"}],"component":"xen","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["4.20.4+39-gf1e1321c87-0+deb13u1"],"id":"tcs_01M5NT8KQY53XNXKZ3TC85PJS7","modified_at":"2026-10-21T23:00:08.762748164Z","published_at":"2026-09-08T13:17:19.623Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2026-62437","https://security-tracker.debian.org/tracker/CVE-2026-62437"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2026-62437#Debian:13/xen","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2026-62437"}],"summary":"When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated removal of tracking structures for IRQs used b"}