CVE-2026-102704
Gravedad CVSS v3.1:
MEDIA
Tipo:
CWE-693
Fallo del mecanismo de protección
Fecha de publicación:
04/11/2026
Última modificación:
04/11/2026
Descripción
*** Pendiente de traducción *** [This CNA information record relates to multiple CVEs; the<br />
text explains which aspects/vulnerabilities correspond to which CVE.]<br />
<br />
A common access pattern is a batch of Grant Copy operations acting on<br />
adjacent address ranges in the same source or destination page. For<br />
performance reasons, Xen caches details internally to reuse already<br />
validated data. The conditions on when to re-validate the internal data<br />
were not correct in some cases:<br />
<br />
- Frame numbers and grant references could wrongly be mixed up. This<br />
is CVE-2026-102703.<br />
<br />
- Copying by frame number (rather than grant reference) is permitted<br />
only when operating on the caller&#39;s own memory. The check to enforce<br />
this restriction was misplaced. This is CVE-2026-102704.
Impacto
Puntuación base 3.x
4.40
Gravedad 3.x
MEDIA