Use-after-free in Linux kernel - CVE-2026-100080
Published: November 6, 2026
Vulnerability identifier: #VU159854
CSH Severity: Low
CVSS v4: 5.7 [CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-100080
CWE-ID: CWE-416
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local privileged user to cause a denial of service or potentially disclose sensitive information.
The vulnerability exists due to a use-after-free in the Linux kernel xen-netback driver when queue teardown following a frontend connection error frees statistics data without synchronizing RCU readers. A local privileged user can supply invalid Xenstore data from a guest to trigger this error path while statistics are being read through sysfs, potentially causing a kernel crash or exposing information from freed or reused memory.
Affected software
Linux kernel
How to mitigate CVE-2026-100080
Install security update from vendor's repository.
External References
- https://git.kernel.org/stable/c/36f858f228e3f955b9336af7f94634747c221518
- https://git.kernel.org/stable/c/37d5a73170579b30e67cc8b19ec69715eea3a6b6
- https://git.kernel.org/stable/c/4223b33be49ee09acb6f1d26beb4a36dd3b8d63a
- https://git.kernel.org/stable/c/4867687b6ad28ab84bc0811d8f8f9972e769da02
- https://git.kernel.org/stable/c/6cd611d2abdd8623a554e14145f82c1cb4e4467a
- https://git.kernel.org/stable/c/89e534265b62c94749639350200b10370564bb3a
- https://git.kernel.org/stable/c/ab9cdf1291be551da999510b30216a2886074d7a
- http://www.openwall.com/lists/oss-security/2026/11/06/9
- http://xenbits.xen.org/xsa/advisory-526.html