{"id":"ALPINE-CVE-2026-102700","details":"With its original introduction, GNTTAB_cache_flush was made available\nuniformly.  XSA-232 (CVE-2017-14318) then covered an omitted NULL\npointer check, yet the addition of that check failed to adjust the\nsubsequent error path.  That error path fails to drop a page reference in\ncase the specified page is owned by a special system domain (DOM_IO and\nDOM_COW are system domains which can have memory pages assigned to them.)","modified":"2026-10-14T09:30:02.438987602Z","published":"2026-10-13T16:17:09.623Z","upstream":["CVE-2026-102700"],"references":[{"type":"ADVISORY","url":"https://security.alpinelinux.org/vuln/CVE-2026-102700"}],"affected":[{"package":{"name":"xen","ecosystem":"Alpine:v3.21","purl":"pkg:apk/alpine/xen?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.6-r2"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2026-102700.json"}},{"package":{"name":"xen","ecosystem":"Alpine:v3.22","purl":"pkg:apk/alpine/xen?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20.4-r2"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2026-102700.json"}},{"package":{"name":"xen","ecosystem":"Alpine:v3.23","purl":"pkg:apk/alpine/xen?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20.4-r2"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2026-102700.json"}}],"schema_version":"1.9.0"}