CVE-2026-62435
Gravedad CVSS v3.1:
MEDIA
Tipo:
CWE-362
Ejecución concurrente utilizando recursos compartidos con una incorrecta sincronización (Condición de carrera)
Fecha de publicación:
28/07/2026
Última modificación:
28/07/2026
Descripción
*** Pendiente de traducción *** [This CNA information record relates to multiple CVEs; the<br />
text explains which aspects/vulnerabilities correspond to which CVE.]<br />
<br />
With the introduction of Grant Table v2 came the requirement to be able to<br />
switch between versions. Switching from v1 to v2 reduces the number of<br />
valid grant references, as a bigger shared entry structure is then needed<br />
while the shared table doesn&#39;t change size. Switching from v2 back to v1<br />
the status frames, which are separate in v2, go away.<br />
<br />
Code holding, but intermediately dropping and then re-acquiring the grant<br />
table lock, sometimes wrongly assumes that said properties wouldn&#39;t change<br />
across the window in time where the lock is not being held.<br />
<br />
The v1 -> v2 issue is CVE-2026-62435.<br />
<br />
The v2 -> v1 issue is CVE-2026-62436.
Impacto
Puntuación base 3.x
6.50
Gravedad 3.x
MEDIA



