{"id":"CVE-2026-102702","title":"[This CNA information record relates to multiple CVEs; the\ntext explains which aspects/vulnerabilities correspond to which CVE.]\n\n1) XSA-437 (CVE-2023-34321) addressed issues with overflows in\n   calculations involved in guests flushing …","summary":"[This CNA information record relates to multiple CVEs; the\ntext explains which aspects/vulnerabilities correspond to which CVE.]\n\n1) XSA-437 (CVE-2023-34321) addressed issues with overflows in\n   calculations involved in guests flushing …","severity":"high","published":"2026-10-13","updated":"2026-10-14","sourceUpdated":"2026-10-14T16:10:14.750","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-102702","references":[{"url":"https://xenbits.xenproject.org/xsa/advisory-519.html","label":"security@xen.org"}],"tags":["nvd","cve.org"],"ingestedAt":"2026-10-13T16:35:46.735Z","vendor":"Xen","product":"Xen","affected":["Xen"],"epss":0.00292,"epssPercentile":0.21601,"cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"partial","timestamp":"2026-10-20T17:27:31.334256Z"},"cvssSource":"adp","slug":"CVE-2026-102702","body":"## Overview\n\n[This CNA information record relates to multiple CVEs; the\ntext explains which aspects/vulnerabilities correspond to which CVE.]\n\n1) XSA-437 (CVE-2023-34321) addressed issues with overflows in\n   calculations involved in guests flushing caches through\n   GNTTABOP_cache_flush.  Unfortunately the fix there introduced a\n   calculation which may underflow, resulting in a loop which would - at\n   least on 64-bit Arm - take excessively long, and which would likely\n   eventually crash the hypervisor.\n\n   This is CVE-2026-102699.\n\n2) GNTTABOP_cache_flush may be issued on memory mapped from another\n   domain using the grant table interface.  However there was no\n   restriction to disallow the use of invalidate-without-clean against\n   read-only grant mappings, which may corrupt the granted memory.\n\n   This is CVE-2026-102702.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":41.3,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[{"seq":226056,"id":"CVE-2026-102702","ts":1792520127865,"field":"cvss","old":null,"new":"7.5"},{"seq":226055,"id":"CVE-2026-102702","ts":1792520127865,"field":"severity","old":"none","new":"high"}]}