Xen XSA-519: Arm GNTTABOP_cache_flush vulnerabilities allowing DoS and privilege escalation

Vulnerability Overview Vulnerability ID: CVE-2026-102699, CVE-2026-102702 Title: Arm: multiple issues with GNTTABOP_cache_flush Publication Date: 2026-10-13 12:00 Update Date: 2026-10-13 12:28 Version: 2 Affected Scope Affected Systems: All Xen versions starting from 4.5; Xen versions 4.4 and earlier are not affected. Affected Architectures: Only Arm systems are affected; x86 systems are not affected. Impact Description: - A malicious unprivileged virtual machine may crash the hypervisor, causing a denial of service (DoS) for the entire host, or corrupt information belonging to another domain. Privilege escalation and information leaks cannot be ruled out. Remediation Patch Files: - - - - Patch Application Instructions: - Applying the appropriate patch resolves this issue. - For released versions, patches are generally prepared to apply to stable branches and may not apply cleanly to the most recent release tarball. Downstream users are encouraged to update to the tip of the stable branch before applying these patches. Additional Information Vulnerability Discoverers: - CVE-2026-102699 was discovered by Leonid Komaritskiy of EPAM and later independently reported by Ayan Kumar Halder of AMD. - CVE-2026-102702 was discovered by the security team while reviewing the surrounding code. Deployment Restrictions: - During the pre-disclosure period, deployment of patches and/or mitigations is permitted, even for publicly facing systems and for unauthorized end-users and administrators. - However, distribution of updated software to members outside the pre-disclosure list is prohibited (unless they are members of the pre-disclosure list). - Pre-disclosure list members who wish to deploy significantly different patches and/or mitigations should contact the Xen Project Security Team. More Information: - For more information on permissible uses, refer to the Xen Project community's security decision process: http://www.xenproject.org/security/decision.html Code Block

Goal Reached Thanks to every supporter — we hit 100%!

Xen XSA-519: Arm GNTTABOP_cache_flush vulnerabilities allowing DoS and privilege escalation