Xen: With its original introduction, GNTTAB_cache_flush was made available uniformly. (CVE-2026-102700)
Description
CVE-2026-102700 is a medium severity vulnerability in Xen related to the GNTTAB_cache_flush function. The issue stems from an error path that fails to drop a page reference when the page is owned by special system domains such as DOM_IO and DOM_COW. This flaw originated from an incomplete fix in a previous advisory (XSA-232 / CVE-2017-14318) where a NULL pointer check was added but the error handling was not fully corrected. The vulnerability affects multiple specific Ubuntu Xen package versions.
CVSS v3.1
Score 4.7medium
Affected software
pkg:deb/ubuntu/xen?arch=source&distro=xenialpkg:deb/ubuntu/xen?arch=source&distro=bionicpkg:deb/ubuntu/xen?arch=source&distro=focalpkg:deb/ubuntu/xen?arch=source&distro=jammypkg:deb/ubuntu/xen?arch=source&distro=noblepkg:deb/ubuntu/xen?arch=source&distro=stonkingpkg:deb/ubuntu/xen?arch=source&distro=resoluteRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability in Xen involves the GNTTAB_cache_flush function, which was originally made available uniformly. A prior fix (XSA-232 / CVE-2017-14318) addressed a missing NULL pointer check but did not properly adjust the error path that handles page references. Specifically, the error path fails to drop a page reference if the page belongs to special system domains such as DOM_IO and DOM_COW. This can lead to resource management issues within the Xen hypervisor. The affected versions are specific Ubuntu Xen package releases.
Potential Impact
The vulnerability does not impact confidentiality or integrity but has an impact on availability, as indicated by the CVSS vector (AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H). This suggests that a local attacker with low privileges could cause a denial of service or resource exhaustion by exploiting the failure to properly drop page references in certain error conditions.
Mitigation Recommendations
No patch or remediation details are provided in the input data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, limit access to trusted users and monitor for unusual system behavior related to memory management in Xen.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- UBUNTU-CVE-2026-102700
- Osv Schema Version
- 1.7.0
- Ecosystems
- ["Ubuntu:16.04:LTS","Ubuntu:18.04:LTS","Ubuntu:20.04:LTS","Ubuntu:22.04:LTS","Ubuntu:24.04:LTS","Ubuntu:26.10","Ubuntu:26.04:LTS"]
- Cvss Version
- 3.1
Threat ID: 6ada45044d27ba8daa6a5b0f
Added to database: 10/22/2026, 17:16:52 UTC
Last enriched: 10/22/2026, 17:39:52 UTC
Last updated: 10/23/2026, 01:15:21 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.