Xen (grant tables): Type confusion in grant-copy - guest corrupts hypervisor state

CVE-2026-62428Kernel, userspace & hypervisorXSA-500curated

Impact

Type confusion in grant-copy - guest corrupts hypervisor state

Who can reach it

Tenant VM guest

What to do

Hypervisor patch + reboot/evacuation. Grant tables are on the hot path for every PV driver, so this is unavoidable exposure

References

https://xenbits.xen.org/xsa/advisory-500.html

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.