As cited
Copy frozen at (site build).
vulnerabilities
Xen Security Advisory 523 v2 (CVE-2026-102703,CVE-2026-102704) - arbitrary read/write via grant copy
Xen released version 2 of Security Advisory 523, addressing CVE-2026-102703 and CVE-2026-102704, which enable arbitrary read and write access via grant copy operations. The vulnerabilities stem from Xen's caching mechanism for batch grant copy operations on adjacent address ranges. The advisory moved to public disclosure on November 3, 2026.
Why it matters: Xen hypervisor operators and administrators must assess whether their systems are affected by these arbitrary read/write vulnerabilities and apply available patches or mitigations to prevent guest-to-host or cross-guest memory access.
- Source published
- First seen by Cybersecurity Tracker