{"id":"CVE-2026-102700","revision":"8aa7cd209df046a1b14291ae9b26bde9","records":[{"revision":"8aa7cd209df046a1b14291ae9b26bde9","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-102700","aliases":[],"title":"gnttab: cache-flush handling may cause page reference leak","description":"With its original introduction, GNTTAB_cache_flush was made available\nuniformly.  XSA-232 (CVE-2017-14318) then covered an omitted NULL\npointer check, yet the addition of that check failed to adjust the\nsubsequent error path.  That error path fails to drop a page reference in\ncase the specified page is owned by a special system domain (DOM_IO and\nDOM_COW are system domains which can have memory pages assigned to them.)","state":0,"publishedAt":"2026-10-13T15:45:27.794+00:00","modifiedAt":"2026-10-20T17:16:15.958+00:00","affected":[{"ecosystem":"Vendor product","name":"Xen","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"defaultStatus\": \"unknown\",\n                    \"product\": \"Xen\",\n                    \"vendor\": \"Xen\",\n                    \"versions\": [\n                        {\n                            \"status\": \"unknown\",\n                            \"version\": \"consult Xen advisory XSA-520\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://xenbits.xenproject.org/xsa/advisory-520.html"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-102700","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-102700","identifiers":["CVE-2026-102700"]},"retained":false,"historicalAffected":[]}],"coverage":[]}