CVE-2026-62436

[This CNA information record relates to multiple CVEs; the<br /> text explains which aspects/vulnerabilities correspond to which CVE.]<br /> <br /> With the introduction of Grant Table v2 came the requirement to be able to<br /> switch between versions. Switching from v1 to v2 reduces the number of<br /> valid grant references, as a bigger shared entry structure is then needed<br /> while the shared table doesn&amp;#39;t change size. Switching from v2 back to v1<br /> the status frames, which are separate in v2, go away.<br /> <br /> Code holding, but intermediately dropping and then re-acquiring the grant<br /> table lock, sometimes wrongly assumes that said properties wouldn&amp;#39;t change<br /> across the window in time where the lock is not being held.<br /> <br /> The v1 -&gt; v2 issue is CVE-2026-62435.<br /> <br /> The v2 -&gt; v1 issue is CVE-2026-62436.