virtualization

Xen XSA-523: Grant Copy Flaws Let One VM Read and Write Any Other VM’s Memory

XSA-523: two grant-copy flaws (CVE-2026-102703/102704) let a malicious VM read and write other VMs’ memory including dom0 across Xen 4.6+; no mitigation, fixed upstream for 4.18–4.19 and via XCP-ng/Qubes builds.