Linux Kernel Grant Allocation Validation Flaw

CVE-2026-98900

What is CVE-2026-98900?

A validation flaw in the grant allocation functionality of the Linux kernel can lead to improper handling of user requests. The gntalloc_ioctl_alloc() function allocates a grant-id array without first verifying if the requested count exceeds the global grant limit. Such requests can cause failures during allocation. With the new fix, the process validates the grant count before allocation and employs a subtraction-based check to ensure the count remains within the limit when accessing shared resources, thereby mitigating potential overflow risks and maintaining robust memory management.

References