{"cve":"CVE-2026-98900","nvd":{"published":"2026-10-23T12:18:24.020","modified":"2026-10-26T07:17:15.340","status":"Received","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nxen/gntalloc: validate grant count before allocation\n\ngntalloc_ioctl_alloc() allocates the grant-id array before checking\nwhether the requested count fits within the global grant limit. Counts\nabove that limit cannot succeed, so reject them before the\nuser-controlled allocation reaches kcalloc().\n\nUse a subtraction-based check while holding gref_mutex so adding the\nrequested count cannot wrap. Also cast the count before advancing the\nper-file index so the page-size multiplication is performed in 64-bit\narithmetic.","cvss_v4":null,"cvss_v3":null,"cwes":[],"references":["https://git.kernel.org/stable/c/2299822f3f466b5dcad2377bf63986199f881a6b","https://git.kernel.org/stable/c/231542f4e43cf9837cb520664545e85fbe666b7b","https://git.kernel.org/stable/c/641de086a05f349de7fc548612432bc2fed721ca","https://git.kernel.org/stable/c/71a0cf87e19fb35c4292ca88985e376e613c900a","https://git.kernel.org/stable/c/720554c04acba80018ded069d3e0984bebaee891"],"products":[],"source":"nvd","synced_at":"2026-10-26T07:33:01.631659812+00:00"},"epss":{"cve":"CVE-2026-98900","score":0.00179,"percentile":0.07396,"date":"2026-10-25"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}