Xen XSA-523: guest reads/writes other domains and Dom0 memory via grant copy (CVE-2026-102703/CVE-2026-102704)
Severity: critical · Patch status: partial · Since 2026-11-03 · CVE-2026-102703, CVE-2026-102704
Xen Project published XSA-523 version 2 as a public release on 2026-11-03 at 12:00 UTC. A batch of grant-copy operations on adjacent ranges can reuse cached validation results that were not always re-checked, which produced two flaws: frame numbers and grant references can be confused (CVE-2026-102703), and the check that limits copy-by-frame-number to the caller's own memory is misplaced (CVE-2026-102704). A malicious guest can therefore read and write memory belonging to other domains, including Dom0. The advisory covers all Xen releases from 4.6 onwards and says 4.5 and earlier are not affected. It states there is no known mitigation, so the fix is the only remedy. Upstream published two patch sets: one for xen-unstable and 4.19.x, and one for 4.18.x and 4.17.x. Downstream status is mixed on the day: Qubes issued QSB-121 with Xen 4.19.6-3 for Qubes 4.3 dom0, XCP-ng 8.3 LTS shipped the fix in its 2026-11-03 update, SUSE shows released packages for some products and in-progress or affected states for others, and Debian lists the package as unfixed. The advisory credits Anthropic using Claude as the discoverer, validation by Stephan Lipp of Ada Logics, and an independent report from the CodeAnt AI Security Research Team. No exploitation report was found in the sources checked.
What to do
- Patch every Xen host on 4.6 or later as a priority. Where the upstream patch sets apply (xen-unstable, 4.19.x, 4.18.x, 4.17.x), apply them; the advisory says patches target stable branches and may not apply cleanly to release tarballs, so update to the stable-branch tip first if needed
- Use your vendor's packages where they exist: XCP-ng 8.3 LTS 2026-11-03 update (Vates VSA-2026-055), Qubes OS 4.3 dom0 Xen 4.19.6-3 (QSB-121, arrives via security-testing first), SUSE xen packages per the SUSE CVE page (state varies by product), and Debian once fixed (unfixed at check time)
- Hosts on Xen 4.6 to 4.16 have no upstream patch in the advisory; treat them as needing an upgrade to a branch with a vendor fix, and confirm your vendor's coverage before relying on a backport
- Until a host is patched, treat untrusted guest workloads as able to read and write other tenants and Dom0 memory; consider isolating or draining those hosts
- Re-check the Ubuntu, Red Hat, AWS and Citrix trackers, which could not be read or had no entry at check time, and monitor for exploitation reports
Fixed versions
- Upstream: xsa523 patch set for xen-unstable and 4.19.x; xsa523-4.18 patch set for 4.18.x and 4.17.x (advisory v2)
- Qubes OS 4.3 dom0: Xen 4.19.6-3 (QSB-121; security-testing repo first)
- XCP-ng 8.3 LTS: 2026-11-03 update (Vates VSA-2026-055)
- SUSE xen fixed-package list on CVE page: 4.20.4_08-150700.3.52.1, 4.18.6_03-150600.3.56.1, 4.17.7_04-150500.3.85.1, 4.16.7_18-150400.4.98.1, 4.12.4_78-3.157.1 (not all products Released)
Sources
All live incidents on Threat Watch
