CVE-2026-100081
xen-netback: defer xenvif_mcast_addr_list_free()
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
In the Linux kernel, the following vulnerability has been resolved: xen-netback: defer xenvif_mcast_addr_list_free() In order for the function to legitimately avoid locking/RCU, it needs to run after all TX/RX processing has finished/stopped: Lookups happen from xenvif_start_xmit(), while adds/removes happen from xenvif_tx_action() (called out of xenvif_poll()). Move the call out of xenvif_disconnect_data() (the call to the function from connect()'s error path doesn't require any cleaning up there), and put it past the synchronization point in backend_disconnect(). This is XSA-527 / CVE-2026-100081.
| Vendor | linux |
| Product | linux |
| Ecosystems | |
| Industries | Technology |
| Published | Nov 6, 2026 |
| Last Updated | Nov 6, 2026 |
Stay Ahead of the Next One
Get instant alerts for linux linux
Be the first to know when new unknown vulnerabilities affecting linux linux are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Linux / Linux
b17075d5c1988b83f840d272c795ac17d57ce804 < 96e05a8ce243e2207704e2e7a6e7d1172730f515 b17075d5c1988b83f840d272c795ac17d57ce804 < 0e786123e46d08d2247ce93a5435e45ed9f4c5d1 b17075d5c1988b83f840d272c795ac17d57ce804 < 990d123d9eaa3ac6c979eed245658676d65ce0db b17075d5c1988b83f840d272c795ac17d57ce804 < 0d515c409033c8e2a645a781be3ca76ab825fc8c b17075d5c1988b83f840d272c795ac17d57ce804 < a6bb2f1fa62c56279bdcdadce28d1310c5e12b62 b17075d5c1988b83f840d272c795ac17d57ce804 < 34f0f63dc6dc11895a17bb5672451b6b11622c99 b17075d5c1988b83f840d272c795ac17d57ce804 < fb38fc58acb26d74fe8f7b19621fafaae3c040ff
Linux / Linux
4.11
References
git.kernel.org: https://git.kernel.org/stable/c/96e05a8ce243e2207704e2e7a6e7d1172730f515 git.kernel.org: https://git.kernel.org/stable/c/0e786123e46d08d2247ce93a5435e45ed9f4c5d1 git.kernel.org: https://git.kernel.org/stable/c/990d123d9eaa3ac6c979eed245658676d65ce0db git.kernel.org: https://git.kernel.org/stable/c/0d515c409033c8e2a645a781be3ca76ab825fc8c git.kernel.org: https://git.kernel.org/stable/c/a6bb2f1fa62c56279bdcdadce28d1310c5e12b62 git.kernel.org: https://git.kernel.org/stable/c/34f0f63dc6dc11895a17bb5672451b6b11622c99 git.kernel.org: https://git.kernel.org/stable/c/fb38fc58acb26d74fe8f7b19621fafaae3c040ff openwall.com: http://www.openwall.com/lists/oss-security/2026/11/06/10 xenbits.xen.org: http://xenbits.xen.org/xsa/advisory-527.html