cve-2026-102704

Xen Project advisory XSA-523 credits Anthropic's Claude with finding two grant copy flaws that let a malicious guest read and write other domains' memory, including Dom0. No mitigation exists, so patching is the only fix.