CVE-2026-62428 grant-table: type confusion in grant-copy

When grant-copy operations are processed, the respective grant may or may not already be in use by another operation a mapping or another copy. For all copy operations the referenced guest frame is looked up. When another operation is already active for the grant the grant is "pinned", what is...

CVE-2026-62428

CVE-2026-62428 describes a type-confusion in grant-copy handling where a grant may be 'pinned' to one operation, causing the permission check and copy operation to reference potentially different guest frames. This could lead to inconsistencies and incorrect permission checks. Documented impact i...

CVE-2026-62428

When grant-copy operations are processed, the respective grant may or may not already be in use by another operation a mapping or another copy. For all copy operations the referenced guest frame is looked up. When another operation is already active for the grant the grant is "pinned", what is...