Ethical Hacking News
Two critical vulnerabilities in the Xen hypervisor allow a malicious guest virtual machine to read and write the memory of other VMs on the same host, including the dom0. Patches have been made available to fix the issue, but users of earlier versions need to take immediate action to prevent potential attacks.
Two critical vulnerabilities (CVE-2026-102703 and CVE-2026-102704) have been found in the Xen hypervisor, allowing malicious guest VMs to read and write the memory of other VMs. The vulnerabilities are related to the grant copy operation and allow a malicious guest VM to bypass permissions checks. XCP-ng and Qubes OS, both built around Xen, have also been affected by the vulnerability. Patches are available for Xen versions 4.19.x and 4.18.x to fix the issue. Users of earlier Xen versions (4.6 to 4.16) are advised to apply updates to prevent potential attacks.
The Xen hypervisor, a widely-used open-source virtualization platform, has recently been found to contain two critical vulnerabilities that allow a malicious guest virtual machine (VM) to read and write the memory of other VMs on the same host, including the dom0, the VM that has full permissions and manages the others. The vulnerabilities, tracked as CVE-2026-102703 and CVE-2026-102704, under Xen advisory XSA-523, have been identified by AI company Anthropic and validated by Ada Logics' Stephan Lipp.
The flaws in the Xen hypervisor are related to the grant copy operation, which is used by Xen to copy data between VMs. Each VM informs Xen which of its memory pages other VMs may use, and Xen checks those permissions. In some cases, Xen reuses checks it has already made, but in other cases, it does not check again when it should have. This mistake allows a malicious guest VM to read and write memory it does not own.
XCP-ng, an open-source virtualization platform built around Xen, has also been affected by the vulnerability, with its update notes stating that "a single compromised guest can break out of its isolation and take over the whole host." Qubes OS, a security-focused desktop operating system that uses Xen-based compartments called qubes, has also been affected, with every supported release and configuration being impacted.
The good news is that patches have been made available for Xen versions 4.19.x and 4.18.x, which should fix the issue. However, users of earlier versions, such as 4.6 to 4.16, are not yet affected by the patches and should ensure that they apply the necessary updates to prevent potential attacks.
It is worth noting that the vulnerabilities are considered critical, and users of Xen-based systems should take immediate action to patch their systems and prevent potential attacks. The fact that the vulnerabilities have been found and patched by the Xen Project, with the help of Anthropic and other organizations, demonstrates the importance of responsible disclosure and the need for users to stay up-to-date with the latest security patches.
In conclusion, the Xen hypervisor vulnerability is a critical security issue that affects many organizations that use virtualization platforms based on Xen. The vulnerabilities allow malicious guest VMs to access the memory of other VMs, including the dom0, which has full permissions. Users of Xen-based systems should take immediate action to patch their systems and prevent potential attacks. The Xen Project's release of patches and the responsible disclosure of the vulnerabilities demonstrate the importance of security in the virtualization space.
Related Information:
https://www.ethicalhackingnews.com/articles/Xen-Hypervisor-Vulnerability-Leaves-Malicious-VMs-with-Unrestricted-Access-to-Other-VMs-Memory-ehn.shtml
https://thehackernews.com/2026/11/xen-hypervisor-flaws-let-one-malicious.html
https://nvd.nist.gov/vuln/detail/CVE-2026-102703
https://www.cvedetails.com/cve/CVE-2026-102703/
https://nvd.nist.gov/vuln/detail/CVE-2026-102704
https://www.cvedetails.com/cve/CVE-2026-102704/
Published: Wed Nov 4 07:09:45 2026 by llama3.2 3B Q4_K_M
