SB20261106120 - Use-after-free in Linux kernel net xen-netback driver

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB20261106120

SB20261106120 - Use-after-free in Linux kernel net xen-netback driver

Published: November 6, 2026

Security Bulletin ID SB20261106120
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Denial of service

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Use-after-free (CVE-ID: CVE-2026-100081)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 5.7 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a local user to potentially cause a denial of service through access to freed kernel memory.

The vulnerability exists due to use-after-free in the Linux kernel xen-netback multicast address list handling when interface disconnection overlaps with transmit or receive processing. A local user can trigger concurrent network processing and interface disconnection to potentially cause active processing to access freed list entries and crash the kernel.


Remediation

Install update from vendor's website.

References