CVE-2021-28699

CVE-2021-28699 is a medium-severity vulnerability affecting Xen, Debian, and Fedora, stemming from an inadequate array bounds check in the v2 grant table interface. Specifically, when 32-bit guests on x86 request frame numbers for the grant status table, the translation layer can write past allocated memory due to insufficient bounds enforcement. This local vulnerability (CVSS 5.5) allows an attacker with low privileges to achieve a high impact on availability (denial of service), but does not directly affect confidentiality or integrity. There is no evidence of active exploitation, public exploit code, or significant community discussion, with only one article and one community mention.