CVE-2026-62428

UNKNOWN 0.0

grant-table: type confusion in grant-copy

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

When grant-copy operations are processed, the respective grant may or may not already be in use by another operation (a mapping or another copy). For all copy operations the referenced guest frame is looked up. When another operation is already active for the grant (the grant is "pinned"), what is being supplied back to actually carry out permission checks and copy operation may not be consistent: The permission check may be carried out on a page different from the one involved in the copy.

Vendor	xen
Product	xen
Published	Jul 28, 2026
Last Updated	Jul 28, 2026

Stay Ahead of the Next One

Get instant alerts for xen xen

Be the first to know when new unknown vulnerabilities affecting xen xen are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Xen / Xen

All versions affected

References

NVD ↗ CVE.org ↗ EPSS Data ↗

xenbits.xenproject.org: https://xenbits.xenproject.org/xsa/advisory-500.html xenbits.xen.org: http://xenbits.xen.org/xsa/advisory-500.html

Credits

This issue was discovered by Roman S.