CVE-2026-98900

The Linux kernel contains a vulnerability in the xen/gntalloc component where the gntalloc_ioctl_alloc() function allocates the grant-id array before verifying if the requested count exceeds the global grant limit. This allows user-controlled allocations to reach kcalloc() even when they should b...

EUVD-2026-108856

In the Linux kernel, the following vulnerability has been resolved: xen/gntalloc: validate grant count before allocation gntallocioctlalloc allocates the grant-id array before checking whether the requested count fits within the global grant limit. Counts above that limit cannot succeed, so rejec...