Xen XSA-523: grant-copy bugs let a malicious guest read and write any other VM's memory, including dom0, on every Xen from 4.6 on (CVE-2026-102703, CVE-2026-102704)

official (Xen Security Advisory XSA-523, Nov 3); no exploitation reported2026-11-03

Xen XSA-523: grant-copy bugs let a malicious guest read and write any other VM's memory, including dom0, on every Xen from 4.6 on (CVE-2026-102703, CVE-2026-102704)

Patches are attached to the advisory for xen-unstable through 4.19 and for 4.17 to 4.18. Xen 4.5 and earlier are not affected. The advisory credits Anthropic, using Claude, with the discovery, validated by Stephan Lipp of Ada Logics, with an independent report from the CodeAnt AI Security Research Team.

Who should act: anyone running multi-tenant Xen hosts, plus products built on Xen (XCP-ng, Citrix/XenServer, Qubes OS and others) as their vendors ship XSA-523. The Hacker News reported that Debian's tracker still listed bookworm, trixie and forky as vulnerable as of Nov 4.

Sources: Xen Project: XSA-523, arbitrary read/write via grant copy (Nov 3) · The Hacker News: Xen Hypervisor Flaws Let One Malicious VM Read and Write Any Other VM's Memory (Nov 4)