Advisory: XSA-234

Various grant unmapping operations will succeed and drop a writeable reference count, even when the mapping was only read-only. This can be used to shuffle a writeable mapping out of Xen's reference counting.

See also: tests/xsa-234/main.c