CVE-2026-100081
HIGH
MEDIUM
Priority: 0.01
BB Relevance:
31/100
Published: 2026-11-06
Modified: 2026-11-13
First seen: 2026-11-06
Status: active
Attack Surface
No Interaction
Conf. Impact
Integ. Impact
Scope Change
CVSS Vector Breakdown
AV:
Local
AC:
High
PR:
Low
UI:
None
S:
Changed
C:
High
I:
High
A:
High
Description
In the Linux kernel, the following vulnerability has been resolved: xen-netback: defer xenvif_mcast_addr_list_free() In order for the function to legitimately avoid locking/RCU, it needs to run after all TX/RX processing has finished/stopped: Lookups happen from xenvif_start_xmit(), while adds/removes happen from xenvif_tx_action() (called out of xenvif_poll()). Move the call out of xenvif_disconnect_data() (the call to the function from connect()'s error path doesn't require any cleaning up there), and put it past the synchronization point in backend_disconnect(). This is XSA-527 / CVE-2026-100081.
Affected Software (33)
| Vendor | Product | Version |
|---|---|---|
| Linux | Linux | b17075d5c1988b83f840d272c795ac17d57ce804 < 96e05a8ce243e2207704e2e7a6e7d1172730f515 |
| Linux | Linux | b17075d5c1988b83f840d272c795ac17d57ce804 < 0e786123e46d08d2247ce93a5435e45ed9f4c5d1 |
| Linux | Linux | b17075d5c1988b83f840d272c795ac17d57ce804 < 990d123d9eaa3ac6c979eed245658676d65ce0db |
| Linux | Linux | b17075d5c1988b83f840d272c795ac17d57ce804 < 0d515c409033c8e2a645a781be3ca76ab825fc8c |
| Linux | Linux | b17075d5c1988b83f840d272c795ac17d57ce804 < a6bb2f1fa62c56279bdcdadce28d1310c5e12b62 |
| Linux | Linux | b17075d5c1988b83f840d272c795ac17d57ce804 < 34f0f63dc6dc11895a17bb5672451b6b11622c99 |
| Linux | Linux | b17075d5c1988b83f840d272c795ac17d57ce804 < fb38fc58acb26d74fe8f7b19621fafaae3c040ff |
| Linux | Linux | 4.11 |
| Linux | Linux | b17075d5c1988b83f840d272c795ac17d57ce804 < 96e05a8ce243e2207704e2e7a6e7d1172730f515 |
| Linux | Linux | b17075d5c1988b83f840d272c795ac17d57ce804 < 0e786123e46d08d2247ce93a5435e45ed9f4c5d1 |
| Linux | Linux | b17075d5c1988b83f840d272c795ac17d57ce804 < 990d123d9eaa3ac6c979eed245658676d65ce0db |
| Linux | Linux | b17075d5c1988b83f840d272c795ac17d57ce804 < 0d515c409033c8e2a645a781be3ca76ab825fc8c |
| Linux | Linux | b17075d5c1988b83f840d272c795ac17d57ce804 < a6bb2f1fa62c56279bdcdadce28d1310c5e12b62 |
| Linux | Linux | b17075d5c1988b83f840d272c795ac17d57ce804 < 34f0f63dc6dc11895a17bb5672451b6b11622c99 |
| Linux | Linux | b17075d5c1988b83f840d272c795ac17d57ce804 < fb38fc58acb26d74fe8f7b19621fafaae3c040ff |
| Linux | Linux | 4.11 |
| Linux | Linux | b17075d5c1988b83f840d272c795ac17d57ce804 < 96e05a8ce243e2207704e2e7a6e7d1172730f515 |
| Linux | Linux | b17075d5c1988b83f840d272c795ac17d57ce804 < 0e786123e46d08d2247ce93a5435e45ed9f4c5d1 |
| Linux | Linux | b17075d5c1988b83f840d272c795ac17d57ce804 < 990d123d9eaa3ac6c979eed245658676d65ce0db |
| Linux | Linux | b17075d5c1988b83f840d272c795ac17d57ce804 < 0d515c409033c8e2a645a781be3ca76ab825fc8c |
| Linux | Linux | b17075d5c1988b83f840d272c795ac17d57ce804 < a6bb2f1fa62c56279bdcdadce28d1310c5e12b62 |
| Linux | Linux | b17075d5c1988b83f840d272c795ac17d57ce804 < 34f0f63dc6dc11895a17bb5672451b6b11622c99 |
| Linux | Linux | b17075d5c1988b83f840d272c795ac17d57ce804 < fb38fc58acb26d74fe8f7b19621fafaae3c040ff |
| Linux | Linux | 4.11 |
| Linux | Linux | b17075d5c1988b83f840d272c795ac17d57ce804 < 96e05a8ce243e2207704e2e7a6e7d1172730f515 |
| Linux | Linux | b17075d5c1988b83f840d272c795ac17d57ce804 < 0e786123e46d08d2247ce93a5435e45ed9f4c5d1 |
| Linux | Linux | b17075d5c1988b83f840d272c795ac17d57ce804 < 990d123d9eaa3ac6c979eed245658676d65ce0db |
| Linux | Linux | b17075d5c1988b83f840d272c795ac17d57ce804 < 0d515c409033c8e2a645a781be3ca76ab825fc8c |
| Linux | Linux | b17075d5c1988b83f840d272c795ac17d57ce804 < a6bb2f1fa62c56279bdcdadce28d1310c5e12b62 |
| Linux | Linux | b17075d5c1988b83f840d272c795ac17d57ce804 < 34f0f63dc6dc11895a17bb5672451b6b11622c99 |
Showing 30 of 33 entries