--- title: CVE-2026-79608 description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/CVE-2026-79608 --- # CVE-2026-79608 Publication date 15 October 2026 Last updated 15 October 2026 --- Ubuntu priority **Medium** [Why this priority?](https://ubuntu.com/security/cves/about#priority ) Toggle side navigation ## Description The workaround for XSA-433 (Zenbleed, CVE-2023-20593) was later re-worked to better integrate with other manipulations of the same MSR. In this rework an inverted conditional was introduced, resulting in the workaround to not be applied when needed and vice versa. For more details, see: http://xenbits.xen.org/xsa/advisory-433.html [Read the notes from the security team](https://ubuntu.com/security/CVE-2026-79608#notes) ## Status Show unmaintained releases | Package | Ubuntu Release | Status | | --- | --- | --- | | xen | 26.04 LTS resolute | Needs evaluation | | 24.04 LTS noble | Needs evaluation | | 22.04 LTS jammy | Needs evaluation | | 20.04 LTS focal | Needs evaluation | | 18.04 LTS bionic | Needs evaluation | | 16.04 LTS xenial | Needs evaluation | --- * [How can I get the fixes?](https://ubuntu.com/security/cves/about#security) * [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses) ## Notes --- ### [mdeslaur](https://launchpad.net/~mdeslaur) hypervisor packages are in universe. For issues in the hypervisor, add appropriate tags to each section, ex: Tags\_xen: universe-binary ## References * [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-79608) * [NVD](https://nvd.nist.gov/vuln/detail/CVE-2026-79608) * [Launchpad](https://launchpad.net/bugs/cve/CVE-2026-79608) * [Debian](https://security-tracker.debian.org/tracker/CVE-2026-79608) ### Other references * * * *