{"action":"Upgrade xen to 4.20.3+127-gc42374a105-1 or later.","affected":[{"fixed":"4.20.3+127-gc42374a105-1","introduced":"0"}],"component":"xen","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["4.20.3+127-gc42374a105-1"],"id":"tcs_01M5NT8GX05EEM62PH80B8PA2R","modified_at":"2026-10-04T22:00:08.081667652Z","published_at":"2026-07-28T13:19:01.713Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2026-62428","https://security-tracker.debian.org/tracker/CVE-2026-62428"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2026-62428#Debian:14/xen","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2026-62428"}],"summary":"When grant-copy operations are processed, the respective grant may or may not already be in use by another operation (a mapping or another copy). For all copy operations the referenced guest frame is"}