CyberRota Analysis
AI-GeneratedThe vulnerability affects the Grant Table mechanism in systems utilizing version switching between Grant Table v1 and v2, where improper handling of the grant table lock can lead to inconsistent state assumptions during transitions. This may allow an attacker to exploit the timing window when the lock is not held, potentially leading to unauthorized access or privilege escalation. Organizations using these grant table versions should prioritize addressing this vulnerability to mitigate risks associated with system integrity and security.
Original NVD Description
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] With the introduction of Grant Table v2 came the requirement to be able to switch between versions. Switching from v1 to v2 reduces the number of valid grant references, as a bigger shared entry structure is then needed while the shared table doesn't change size. Switching from v2 back to v1 the status frames, which are separate in v2, go away. Code holding, but intermediately dropping and then re-acquiring the grant table lock, sometimes wrongly assumes that said properties wouldn't change across the window in time where the lock is not being held. The v1 -> v2 issue is CVE-2026-62435. The v2 -> v1 issue is CVE-2026-62436.