Xen Security Advisory 520 v2 (CVE-2026-102700) - gnttab: cache-flush handling may cause page reference leak

As cited

Copy frozen at 2026-10-13 15:04 UTC (site build).

vulnerabilities

Xen Security Advisory 520 v2 (CVE-2026-102700) - gnttab: cache-flush handling may cause page reference leak

Xen published version 2 of Security Advisory XSA-520, addressing a page reference leak in the gnttab cache-flush handling mechanism. The vulnerability (CVE-2026-102700) relates to incomplete validation logic introduced with the original GNTTAB_cache_flush feature and previously addressed partially in XSA-232.

Why it matters: Xen hypervisor operators must review and apply this advisory to prevent potential memory exhaustion or denial of service from unreleased page references in systems using gnttab cache-flush operations.

Source published

2026-10-13 13:05 UTC

First seen by Cybersecurity Tracker

2026-10-13 13:57 UTC