CVE-2026-102702

The Xen hypervisor is vulnerable on Arm systems (specifically versions 4.5 and onwards ) due to a lack of restrictions on the GNTTABOP_cache_flush operation. An unprivileged guest can issue an invalidate-without-clean request against read-only grant mappings provided via the grant table interface...

CVE-2026-102699

The Xen hypervisor is vulnerable to a calculation underflow within the GNTTABOP_cache_flush function. This issue originated as a regression from a previous fix for cache flush overflows. On 64-bit Arm systems, the underflow triggers a loop that runs for an excessive duration, potentially leading ...

CVE-2017-14318

An issue was discovered in Xen 4.5.x through 4.9.x. The function gnttabcacheflush handles GNTTABOPcacheflush grant table operations. It checks to see if the calling domain is the owner of the page that is to be operated on. If it is not, the owner's grant table is checked to see if a grant mappin...

CVE-2017-14318

An issue was discovered in Xen 4.5.x through 4.9.x. The function gnttabcacheflush handles GNTTABOPcacheflush grant table operations. It checks to see if the calling domain is the owner of the page that is to be operated on. If it is not, the owner's grant table is checked to see if a grant mappin...