Xen Security Advisory 521 v2 (CVE-2026-102701) - tapdisk: Out-of-bounds access in tap_ctl_connect_xenblkif()

As cited

Copy frozen at 2026-10-13 15:04 UTC (site build).

vulnerabilities

Xen Security Advisory 521 v2 (CVE-2026-102701) - tapdisk: Out-of-bounds access in tap_ctl_connect_xenblkif()

Xen released Security Advisory 521 version 2, addressing CVE-2026-102701, an out-of-bounds access vulnerability in tapdisk's tap_ctl_connect_xenblkif() function. Tapdisk is a userspace implementation of xen-blkback used by the XAPI toolstack, and the vulnerability occurs during connection negotiation of multi-page rings between frontend and backend components.

Why it matters: Xen hypervisor operators and systems using the XAPI toolstack should evaluate this out-of-bounds access flaw to determine if their tapdisk deployments are affected and require patching.

Source published

2026-10-13 13:08 UTC

First seen by Cybersecurity Tracker

2026-10-13 13:57 UTC