Qubes OS issues security bulletin for Xen arbitrary read/write vulnerabilities

Qubes OS has released Security Bulletin 121 to address a critical vulnerability in the Xen hypervisor, identified as XSA-523. The flaw involves improper validation during Grant Copy operations, which are used for memory sharing between virtual machines.

This vulnerability allows a malicious qube to perform arbitrary memory reads and writes across the system, potentially compromising other qubes and the highly privileged dom0. All supported Qubes OS releases and configurations are affected by this issue.

Technical breakdown of XSA-523

• Memory Validation Flaw: Xen's internal caching of validated data for batch Grant Copy operations failed to trigger re-validation under certain conditions, leading to incorrect data reuse.
• CVE-2026-102703: A logic error caused frame numbers and grant references to be incorrectly mixed during memory operations.
• CVE-2026-102704: A misplaced restriction check allowed copying by frame number—a privilege normally reserved for a caller's own memory—to be exploited elsewhere.
• Privilege Escalation: The combination of these flaws enables a guest VM to bypass isolation boundaries to access memory belonging to the host or other guests.

Why it matters

This vulnerability strikes at the core security model of Qubes OS, which relies on Xen's isolation to maintain compartmentalization. Users must update their Xen packages in dom0 and restart the system to restore the security boundary, with Anti Evil Maid users needing to reseal passphrases due to changes in PCR values.