CVE-2026-102699
Last modified
CVE-2026-102699 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] 1) XSA-437 (CVE-2023-34321) addressed issues with overflows in calculations involved in guests flushing caches through GNTTABOP_cache_flush. Unfortunately the fix there introduced a calculation which may underflow, resulting in a loop which would - at least on 64-bit Arm - take excessively long, and which would likely eventually crash the hypervisor. This is CVE-2026-102699. 2) GNTTABOP_cache_flush may be issued on memory mapped from another domain using the grant table interface. EPSS estimates a 0.15% chance of exploitation in the next 30 days.
Description
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] 1) XSA-437 (CVE-2023-34321) addressed issues with overflows in calculations involved in guests flushing caches through GNTTABOP_cache_flush. Unfortunately the fix there introduced a calculation which may underflow, resulting in a loop which would - at least on 64-bit Arm - take excessively long, and which would likely eventually crash the hypervisor. This is CVE-2026-102699. 2) GNTTABOP_cache_flush may be issued on memory mapped from another domain using the grant table interface. However there was no restriction to disallow the use of invalidate-without-clean against read-only grant mappings, which may corrupt the granted memory. This is CVE-2026-102702.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Xen | Xen | consult Xen advisory XSA-519 |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-102699?
How severe is CVE-2026-102699?
How do I fix CVE-2026-102699?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-102682Pipecat is an open-source Python framework for building real…5.6
- CVE-2026-10269A security vulnerability has been detected in decolua 9route…6.3
- CVE-2026-102692RIOT is an open-source microcontroller operating system desi…9.1
- CVE-2026-102693RIOT is an open-source microcontroller operating system desi…9.6
- CVE-2026-102695OmniFaces is a utility library for Faces. In OmniFaces versi…8.2
- CVE-2026-102697Ollama versions 0.14.0 before 0.31.2 contain an incorrect au…7.8
- CVE-2026-10270A vulnerability was detected in D-Link DI-7001 MINI up to 19…7.5
- CVE-2026-102700With its original introduction, GNTTAB_cache_flush was made …4.7
- CVE-2026-102702[This CNA information record relates to multiple CVEs; the t…7.5
- CVE-2026-102709Improper validation of non-secure (NS) pointers in multiple …8.4
- CVE-2026-10271A flaw has been found in a4m4 Student-Management-System up t…6.3
- CVE-2026-102710Attacker model / Preconditions: a loaded `TXM_MODULE_USER_MO…9.3
Are you affected by CVE-2026-102699?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST