CVE-2026-100082

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2026-11-06 Modified: 2026-11-13 First seen: 2026-11-06 Status: pending_score

Description

In the Linux kernel, the following vulnerability has been resolved: xen-blkback: Avoid UAF when reading I/O statistics Reading I/O statistics via sysfs concurrently with tearing down a frontend device might result in UAF or a NULL dereference, as the reading of the statistics data is not synchronized with freeing the data. Use a rwlock for synchronizing. This is XSA-528 / CVE-2026-100082

Affected Software (37)

VendorProductVersion
Linux Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 253cff0526781e28b1b0f9fdacd74ecdc23d3ab7
Linux Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 2c9ccbe0ffcff3615c7ad917c49b67571a41f21c
Linux Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 58ba056991dbcec8a75e6861cb4479ac947b69e6
Linux Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < fe9ead8c5bdb752e329cecfecbdb5dfca5e9996b
Linux Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < b764e17313534794aeb99c901869f213e36a16ef
Linux Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < c49934da934cf495faf782aa5d84f413221c9be6
Linux Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < b0378161c28e77e4d0e2eda3c9433ab4394d2a2f
Linux Linux 0 < 5.10.274
Linux Linux 0 < 5.15.225
Linux Linux 0 < 6.1.192
Linux Linux 0 < 6.6.162
Linux Linux 0 < 6.12.116
Linux Linux 0 < 6.18.62
Linux Linux 0 < 7.3.3
Linux Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 253cff0526781e28b1b0f9fdacd74ecdc23d3ab7
Linux Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 2c9ccbe0ffcff3615c7ad917c49b67571a41f21c
Linux Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 58ba056991dbcec8a75e6861cb4479ac947b69e6
Linux Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < fe9ead8c5bdb752e329cecfecbdb5dfca5e9996b
Linux Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < b764e17313534794aeb99c901869f213e36a16ef
Linux Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < c49934da934cf495faf782aa5d84f413221c9be6
Linux Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < b0378161c28e77e4d0e2eda3c9433ab4394d2a2f
Linux Linux 0 < 5.10.274
Linux Linux 0 < 5.15.225
Linux Linux 0 < 6.1.192
Linux Linux 0 < 6.6.162
Linux Linux 0 < 6.12.116
Linux Linux 0 < 6.18.62
Linux Linux 0 < 7.3.3
Linux Linux db6fbc106786f26d95889c50c18b1f28aa543a17 < 253cff0526781e28b1b0f9fdacd74ecdc23d3ab7
Linux Linux db6fbc106786f26d95889c50c18b1f28aa543a17 < 2c9ccbe0ffcff3615c7ad917c49b67571a41f21c
Showing 30 of 37 entries

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.24%
Raw Score 0.002440
Percentile 15.7%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00244
2026-11-12
0.00244
2026-11-10
0.00244
2026-11-09
0.00244
2026-11-08
0.00244
2026-11-07
0.00244

Intelligence Sources

mitre ref →
nvd ref →