CVE-2026-62428

grant-table: type confusion in grant-copy

High · published July 28, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
1.5
In the wild
Unconfirmed
What it is

When grant-copy operations are processed, the respective grant may or may

not already be in use by another operation (a mapping or another copy).

For all copy operations the referenced guest frame is looked up. When

another operation is already active for the grant (the grant is "pinned"),

what is being supplied back to actually carry out permission checks and

copy operation may not be consistent: The permission check may be carried

out on a page different from the one involved in the copy.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00115 · 1.5th percentile
Published
2026-07-28T12:32Z
EPSS history
Timeline
  • 28 JUL 12:32Z
    grant-table: type confusion in grant-copy
    cvelistv5