With its original introduction, GNTTAB_cache_flush was made available
uniformly. XSA-232 (CVE-2017-14318) then covered an omitted NULL
pointer check, yet the addition of that check failed to adjust the
subsequent error path. That error path fails to drop a page reference in
case the specified page is owned by a special system domain (DOM_IO and
DOM_COW are system domains which can have memory pages assigned to them.)
References
Configurations
No configuration.
History
20 Oct 2026, 18:17
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-404 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.7 |
13 Oct 2026, 17:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
13 Oct 2026, 16:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-10-13 16:17
Updated : 2026-10-20 18:17
NVD link : CVE-2026-102700
Mitre link : CVE-2026-102700
CVE.ORG link : CVE-2026-102700
JSON object : View
Products Affected
No product.
CWE
CWE-404
Improper Resource Shutdown or Release