[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] With the… (CVE-2026-62436)
CVE-2026-62436 is a vulnerability related to the Grant Table version switching mechanism in a system that uses Grant Tables for shared memory management. Specifically, when switching from Grant Table version 2 back to version 1, the status frames used in version 2 are removed, but some code incorrectly assumes these properties remain unchanged during a brief window when the grant table lock is dropped and reacquired. This can lead to inconsistent state handling. The vulnerability is classified as a race condition (CWE-362) with moderate severity.
AI Analysis
Technical Summary
This vulnerability arises from improper handling of Grant Table version switching from v2 to v1. The code temporarily releases and reacquires the grant table lock but assumes that the properties of the grant table do not change during this window. However, the status frames present in v2 are removed in v1, leading to potential inconsistencies. This race condition can cause partial loss of integrity or availability in the system's shared memory management. The issue is distinct from CVE-2026-62435, which concerns the v1 to v2 switch.
Potential Impact
The vulnerability can lead to a loss of confidentiality and availability due to inconsistent handling of grant table properties during version switching. This may cause incorrect memory access or denial of service conditions. There is no indication of privilege requirements or user interaction needed, and the attack vector is network-based. No known exploits are reported in the wild.
Mitigation Recommendations
No patch or official fix information is currently available. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should monitor vendor communications for updates. No specific workaround or mitigation is described in the provided data.
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] With the… (CVE-2026-62436)
Description
CVE-2026-62436 is a vulnerability related to the Grant Table version switching mechanism in a system that uses Grant Tables for shared memory management. Specifically, when switching from Grant Table version 2 back to version 1, the status frames used in version 2 are removed, but some code incorrectly assumes these properties remain unchanged during a brief window when the grant table lock is dropped and reacquired. This can lead to inconsistent state handling. The vulnerability is classified as a race condition (CWE-362) with moderate severity.
CVSS v3.1
Score 6.5medium
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability arises from improper handling of Grant Table version switching from v2 to v1. The code temporarily releases and reacquires the grant table lock but assumes that the properties of the grant table do not change during this window. However, the status frames present in v2 are removed in v1, leading to potential inconsistencies. This race condition can cause partial loss of integrity or availability in the system's shared memory management. The issue is distinct from CVE-2026-62435, which concerns the v1 to v2 switch.
Potential Impact
The vulnerability can lead to a loss of confidentiality and availability due to inconsistent handling of grant table properties during version switching. This may cause incorrect memory access or denial of service conditions. There is no indication of privilege requirements or user interaction needed, and the attack vector is network-based. No known exploits are reported in the wild.
Mitigation Recommendations
No patch or official fix information is currently available. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should monitor vendor communications for updates. No specific workaround or mitigation is described in the provided data.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-6j24-4j62-qj29
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-62436"]
- Database Specific Severity
- MODERATE
- Cvss Version
- 3.1
Threat ID: 6a6941e49c2644c7f86c5d12
Added to database: 07/28/2026, 23:57:24 UTC
Last enriched: 07/29/2026, 11:23:16 UTC
Last updated: 09/12/2026, 10:01:32 UTC
Views: 108
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.