CVE-2026-102702: Arm: multiple issues with GNTTABOP_cache_flush
Published Oct 13, 2026
·Updated
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.]
Affected Software
9 affected componentsFixes available
XEN Xen
ubuntu/xen*
ubuntu/xen*
ubuntu/xen*
ubuntu/xen*
ubuntu/xen*
ubuntu/xen*
ubuntu/xen*
debian/xen<=4.17.5+72-g01140da4e8-1, <=4.17.7-0+deb12u1, <=4.20.3+127-gc42374a105-0+deb13u1
4.20.4+39-gf1e1321c87-0+deb13u14.20.4+39-gf1e1321c87-1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/xento a version that resolves this vulnerability.Fixed in 4.20.4+39-gf1e1321c87-0+deb13u1Fixed in 4.20.4+39-gf1e1321c87-1
Event History
Oct 13, 2026
CVE Published
via Ubuntu·12:00 AM
Data Sourced
via Ubuntu·12:00 AM
RemedyDescriptionSeverityAffected Software
CVE Published
via MITRE·03:45 PM
Data Sourced
via MITRE·03:45 PM
Description
Data Sourced
via OSV·04:17 PM
DescriptionSeverityAffected Software
Data Sourced
via NVD·04:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which environments are exposed to this issue?
The issue affects Arm Xen environments where a guest uses the grant table interface to map memory from another domain. The affected operation is GNTTABOP_cache_flush.
2
What must an attacker be able to do to exploit it?
An attacker needs to issue GNTTABOP_cache_flush against memory mapped from another domain through a grant mapping, using invalidate-without-clean on a read-only mapping. Xen did not restrict that combination, allowing the granted memory to be corrupted.