CVE-2026-102699

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. 1 XSA-437 CVE-2023-34321 addressed issues with overflows in calculations involved in guests flushing caches through GNTTABOPcacheflush. Unfortunately the fix there...

CVE-2026-102702

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. 1 XSA-437 CVE-2023-34321 addressed issues with overflows in calculations involved in guests flushing caches through GNTTABOPcacheflush. Unfortunately the fix there...

CVE-2026-102699

The Xen hypervisor is vulnerable to a calculation underflow within the GNTTABOP_cache_flush function. This issue originated as a regression from a previous fix for cache flush overflows. On 64-bit Arm systems, the underflow triggers a loop that runs for an excessive duration, potentially leading ...

CVE-2026-102702

The Xen hypervisor is vulnerable on Arm systems (specifically versions 4.5 and onwards ) due to a lack of restrictions on the GNTTABOP_cache_flush operation. An unprivileged guest can issue an invalidate-without-clean request against read-only grant mappings provided via the grant table interface...

CVE-2017-14318

An issue was discovered in Xen 4.5.x through 4.9.x. The function gnttabcacheflush handles GNTTABOPcacheflush grant table operations. It checks to see if the calling domain is the owner of the page that is to be operated on. If it is not, the owner's grant table is checked to see if a grant mappin...

CVE-2017-14318

An issue was discovered in Xen 4.5.x through 4.9.x. The function gnttabcacheflush handles GNTTABOPcacheflush grant table operations. It checks to see if the calling domain is the owner of the page that is to be operated on. If it is not, the owner's grant table is checked to see if a grant mappin...