CVE-2026-102704

{
  "etk_id": "ETK-2026-3489",
  "cve_id": "CVE-2026-102704",
  "display_id": "CVE-2026-102704",
  "ghsa_id": "GHSA-5425-5qfw-cm7h",
  "euvd_id": "EUVD-2026-116864",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Improper authorization in Xen Grant Copy",
  "summary": "Xen Grant Copy processing has an authorization flaw involving cached validation during batches over adjacent memory ranges. An attacker able to invoke the affected Grant Copy operation may read from or write to memory outside its own allocation; the issue requires frame-number-based copy requests.",
  "mitigation": "Apply the Xen patches published with XSA-523 through your distribution or platform provider. Until patched, avoid running untrusted guest workloads where they can use the affected Grant Copy interface.",
  "vendor": "Xen",
  "product": "Xen",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "Xen",
      "purl": null
    }
  ],
  "cwes": null,
  "cvss_score": null,
  "cvss_src": null,
  "cvss_vector": null,
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 7.94332085,
  "t0_at": "2026-11-04T10:30:00.837000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-11-04T10:30:00.837000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-11-04T10:30:00.837000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102704"
    }
  }
}