A vulnerability described as critical has been identified in QEMU. This issue affects the function xen_physdev_map_pirq of the file hw/i386/kvm/xen_evtchn.c of the component KVM Xen. Such manipulation leads to off-by-one.

This vulnerability is listed as CVE-2026-0665. The attack must be carried out locally. There is no available exploit.

It is best practice to apply a patch to resolve this issue.