Xen XSA-523 v2 discloses arbitrary read/write via grant copy
Original title: Xen Security Advisory 523 v2 (CVE-2026-102703,CVE-2026-102704) - arbitrary read/write via grant copy
Public release of XSA-523 v2 details batch grant copy optimizations and potential read/write issues in Xen.
Xen Security Advisory XSA-523 version 2 is publicly released. A common access pattern involves batch of Grant Copy operations on adjacent address ranges. For performance reasons, Xen caches details of these operations. The advisory addresses arbitrary read/write via grant copy.
- Public release in version 2
- Caches details of grant copy operations on adjacent ranges
- Performance optimization mentioned in issue description
- Affects Xen hypervisor grant copy functionality
Impact: Arbitrary read/write via grant copy operations
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2026-102703+1 related CVE | Frame/grant ref mixing in Xen grant copy cache | 4.4 | — |
From the original article
Posted by Xen . org security team on Nov 03 Xen Security Advisory CVE-2026-102703,CVE-2026-102704 / XSA-523 version 2 arbitrary read/write via grant copy UPDATES IN VERSION 2 ==================== Public release. ISSUE DESCRIPTION ================= A common access pattern is a batch of Grant Copy operations acting on adjacent address ranges in the same source or destination page.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.