CVE-2026-102700

UNKNOWN 0.0

gnttab: cache-flush handling may cause page reference leak

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

With its original introduction, GNTTAB_cache_flush was made available uniformly. XSA-232 (CVE-2017-14318) then covered an omitted NULL pointer check, yet the addition of that check failed to adjust the subsequent error path. That error path fails to drop a page reference in case the specified page is owned by a special system domain (DOM_IO and DOM_COW are system domains which can have memory pages assigned to them.)

Vendor	xen
Product	xen
Published	Oct 13, 2026
Last Updated	Oct 13, 2026

Stay Ahead of the Next One

Get instant alerts for xen xen

Be the first to know when new unknown vulnerabilities affecting xen xen are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Xen / Xen

All versions affected

References

NVD ↗ CVE.org ↗ EPSS Data ↗

xenbits.xenproject.org: https://xenbits.xenproject.org/xsa/advisory-520.html xenbits.xen.org: http://xenbits.xen.org/xsa/advisory-520.html

Credits

This issue was discovered independently by Andrew Cooper of Citrix and Yehyeong Lee.