#CVE-2026-102704

AI-found Xen flaws let one virtual machine read and write the whole host's memory — patch and reboot

Anthropic's Claude found two Xen grant-copy flaws (XSA-523) that let a malicious guest reach Dom0. Fixes for Xen, XCP-ng, XenServer and Qubes shipped Nov 3; no workaround.