https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 15:11:21 +0000 https://db.gcve.eu/vuln/cve-2026-102702 <p><strong>Affected:</strong> Xen</p> <p>[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.]</p> <p>1) XSA-437 (CVE-2023-34321) addressed issues with overflows in calculations involved in guests flushing caches through GNTTABOP_cache_flush. Unfortunately the fix there introduced a calculation which may underflow, resulting in a loop which would - at least on 64-bit Arm - take excessively long, and which would likely eventually crash the hypervisor.</p> <p>This is CVE-2026-102699.</p> <p>2) GNTTABOP_cache_flush may be issued on memory mapped from another domain using the grant table interface. However there was no restriction to disallow the use of invalidate-without-clean against read-only grant mappings, which may corrupt the granted memory.</p> <p>This is CVE-2026-102702.</p> <p><strong>Affected:</strong> Xen</p> <p>[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.]</p> <p>1) XSA-437 (CVE-2023-34321) addressed issues with overflows in calculations involved in guests flushing caches through GNTTABOP_cache_flush. Unfortunately the fix there introduced a calculation which may underflow, resulting in a loop which would - at least on 64-bit Arm - take excessively long, and which would likely eventually crash the hypervisor.</p> <p>This is CVE-2026-102699.</p> <p>2) GNTTABOP_cache_flush may be issued on memory mapped from another domain using the grant table interface. However there was no restriction to disallow the use of invalidate-without-clean against read-only grant mappings, which may corrupt the granted memory.</p> <p>This is CVE-2026-102702.</p> https://db.gcve.eu/vuln/cve-2026-102702