Loading vulnerability…
Xen Grant Copy Memory-Ownership Check Bypass
CVE-2026-102704 is an authorization flaw in the Xen hypervisor's Grant Copy operations, disclosed in XSA-523. Xen caches validated information when processing batches of copies involving adjacent ranges within the same source or destination page. A misplaced check fails to correctly enforce the restriction that frame-number-based copying, rather than grant-reference-based copying, may access only the caller's own memory. A malicious guest can bypass this restriction and read or write memory belonging to other domains, including Dom0. Unpatched Xen releases from 4.6 onward are affected; Xen 4.5 and earlier do not contain the flaw.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation breaks inter-domain memory isolation, compromising the confidentiality and integrity of other guests and potentially the privileged Dom0 management domain. Access to management-domain memory can enable guest-to-host privilege escalation, virtual machine escape, and potentially complete host compromise, depending on the memory accessed and the deployment configuration. Isolation is also at risk on single-user Xen systems, including Qubes OS.
If you can’t patch tonight, do this now.
No known workaround prevents exploitation on an affected hypervisor. Temporarily stopping untrusted guests or moving them to patched hosts can reduce exposure but does not repair the vulnerability. Moving guests to another unpatched host does not resolve the risk. Downgrading to obsolete Xen 4.5 or earlier is not recommended.
Patch, then assume compromise.
Apply the appropriate XSA-523 patches or install supplier-provided Xen security updates on the physical host, then complete the required host or Dom0 restart. Updating guest operating systems alone does not remediate the hypervisor. Upstream patch sets cover xen-unstable and Xen 4.17.x through 4.19.x; source builds may require updating to the applicable stable-branch tip before applying them. Older unsupported vulnerable branches should be migrated to a supported, patched release. Fixed downstream packages include Debian 13 Xen 4.20.4+63-g7abfd2bce2-0+deb13u1, XCP-ng 8.3 Xen 4.17.7-4.2.xcpng8.3, and Qubes OS 4.3 Xen 4.19.6-3. Qubes Anti Evil Maid users must also reseal passphrase protection after updating. Verify the active hypervisor build after restarting, accounting for supplier backports.
No public exploits tracked yet. Mallory keeps watching.
22 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.