This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2026-62428 →
Categories
DEBIAN-CVE-2026-62428

When grant-copy operations are processed, the respective grant may or may not already be in use by another operation (a mapping or another copy). For...

Original description

The description as published by the source.

When grant-copy operations are processed, the respective grant may or may not already be in use by another operation (a mapping or another copy). For all copy operations the referenced guest frame is looked up. When another operation is already active for the grant (the grant is "pinned"), what is being supplied back to actually carry out permission checks and copy operation may not be consistent: The permission check may be carried out on a page different from the one involved in the copy.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 xen
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.7-0+deb12u1"}]}]
Debian:13 xen
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20.3+127-gc42374a105-0+deb13u1"}]}]
Debian:14 xen
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20.3+127-gc42374a105-1"}]}]

References

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details