● Covered by 1 source · 1 reportHigh impact1 negative
Xen Hypervisor Flaws Allow Malicious VM to Read/Write Other VM Memory
Key points
- Two flaws (CVE-2026-102703, CVE-2026-102704) affect Xen hypervisor.
- Malicious VM can read/write memory of other VMs, including dom0.
- Xen versions 4.6 and newer are vulnerable; patches are available.
- Anthropic's Claude model found the flaws; no known exploits exist.
Critical Vulnerabilities Discovered in Xen Hypervisor
The Xen Project has disclosed two critical vulnerabilities, tracked as CVE-2026-102703 and CVE-2026-102704 (XSA-523), in its hypervisor. These flaws allow a malicious guest virtual machine (VM) to bypass isolation and access the memory of other VMs running on the same host, including the highly privileged dom0 VM which manages all other guests. All Xen versions from 4.6 up to the latest are affected, while versions 4.5 and older are not vulnerable.
Mechanism of the Flaws
The vulnerabilities reside in Xen's 'grant copy' operation, which handles data transfer between VMs. Xen reuses permission checks for batch copies within the same memory page to optimize performance. However, in certain scenarios, the hypervisor failed to re-check permissions when it should have, allowing a malicious guest to read and write to memory pages it does not own. This oversight enables a complete breakout from VM isolation.
Discovery and Impact
The flaws were initially discovered by AI company Anthropic using its Claude model, with subsequent validation by Stephan Lipp of Ada Logics. The CodeAnt AI Security Research Team independently reported the same issue. While no active exploits have been reported, the impact is severe. XCP-ng, a Xen-based virtualization platform, stated that 'a single compromised guest can break out of its isolation and take over the whole host.' Qubes OS, a security-focused operating system built on Xen, also confirmed that all supported releases are affected.
Patch Availability and Remediation
The Xen Project has released patches for xen-unstable, Xen 4.19.x, and Xen 4.18.x down to 4.17.x. However, no patches are available for Xen versions 4.6 through 4.16, with Xen 4.16's security support having ended in December 2024. Users of affected platforms like XCP-ng (version 8.3) and Qubes OS (version 4.3) have received specific updates (e.g., xen-4.17.7-4.2.xcpng8.3 for XCP-ng, Xen packages 4.19.6-3 for Qubes OS dom0). System reboots are required after applying these patches to ensure full protection.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Reporting from
Two critical flaws in the Xen hypervisor (CVE-2026-102703, CVE-2026-102704) enable a malicious guest VM to read and write the memory of other VMs, including the privileged dom0, on the same host. All Xen versions from 4.6 onward are vulnerable, and patches have been released for newer versions, requiring immediate updates and reboots for affected systems.