[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] 1) XSA-437 (CVE-2023-34321) addressed issues with overflows in calculations involved in guests flushing caches through GNTTABOP_cache_flush. Unfortunately the fix there introduced a calculation which may underflow, resulting in a loop which would - at least on 64-bit Arm - take excessively long, and which would likely eventually crash the hypervisor. This is CVE-2026-102699. 2) GNTTABOP_cache_flush may be issued on memory mapped from another domain using the grant table interface. However there was no restriction to disallow the use of invalidate-without-clean against read-only grant mappings, which may corrupt the granted memory. This is CVE-2026-102702.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities     correspond to which CVE.] 1) XSA-437 (CVE-2023-34321) addressed issues with overflows in calculations     involved in guests flushing caches through GNTTABOP_cache_flush. Unfortunately the fix there introduced a     calculation which may underflow, resulting in a loop which would - at least on 64-bit Arm - take     excessively long, and which would likely eventually crash the hypervisor. This is CVE-2026-102699. 2)     GNTTABOP_cache_flush may be issued on memory mapped from another domain using the grant table interface.
    However there was no restriction to disallow the use of invalidate-without-clean against read-only grant     mappings, which may corrupt the granted memory. This is CVE-2026-102702. (CVE-2026-102699)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-839be67202 advisory.

    x86/AMD: ineffectual Zenbleed workaround [XSA-515, CVE-2026-79608]     x86: XPTI may break on huge-memory systems [XSA-516, CVE-2026-79609]     grant-table: double version change race [XSA-517, CVE-2026-79610]     VMX: VMentry failure with branch tracing and blocked states     [XSA-518, CVE-2026-79611]     Arm: multiple issues with GNTTABOP_cache_flush     [XSA-519, CVE-2026-102699, CVE-2026-102702]     gnttab: cache-flush handling may cause page reference leak     [XSA-520, CVE-2026-102700]

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6571 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6571-1                   security@debian.org     https://www.debian.org/security/                       Moritz Muehlenhoff     October 18, 2026                      https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : xen     CVE ID         : CVE-2026-62437 CVE-2026-79602 CVE-2026-79603 CVE-2026-79604                      CVE-2026-79608 CVE-2026-79609 CVE-2026-79610 CVE-2026-79611                      CVE-2026-102699 CVE-2026-102700 CVE-2026-102702

    Multiple vulnerabilities have been discovered in the Xen hypervisor,     which could result in privilege escalation, information disclosure or     denial of service.

    For the stable distribution (trixie), these problems have been fixed in     version 4.20.4+39-gf1e1321c87-0+deb13u1.

    We recommend that you upgrade your xen packages.

    For the detailed security status of xen please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/xen

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
369383	Linux Distros Unpatched Vulnerability : CVE-2026-102699	Nessus	Misc.	Local	high
369374	Fedora 44 : xen (2026-839be67202)	Nessus	Fedora Local Security Checks	Local	critical
366977	Debian dsa-6571 : libxen-dev - security update	Nessus	Debian Local Security Checks	Local	critical

Detections

Analytics

CVE-2026-102699

high

Tenable Plugins

high

critical

critical