PT-2026-111645 · Xen · Xen
CVE-2026-102700
·
Published
2026-10-13
·
Updated
2026-10-13
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
With its original introduction, GNTTAB cache flush was made available
uniformly. XSA-232 (CVE-2017-14318) then covered an omitted NULL
pointer check, yet the addition of that check failed to adjust the
subsequent error path. That error path fails to drop a page reference in
case the specified page is owned by a special system domain (DOM IO and
DOM COW are system domains which can have memory pages assigned to them.)
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Xen