Double free in Linux kernel - CVE-2026-99287

Vulnerability details

The vulnerability allows a local user to potentially cause a denial of service.

The vulnerability exists due to a double-free condition in the Linux kernel xen-netback driver when cleaning up a failed frontend data-ring mapping operation. A local user can trigger a mapping failure after a ring is already mapped to potentially cause a kernel crash through repeated unmapping of the same ring memory.

Affected software

How to mitigate CVE-2026-99287

External References

• https://git.kernel.org/stable/c/87fd475dc4e354088f6534285388e7b061f54b35
• https://git.kernel.org/stable/c/c5f54af611ff6fe1d53fa05d8e87b469dc56122b
• https://git.kernel.org/stable/c/e7ba61734d6ad6adfd5bf617052e590743211669

Related Security Bulletins

• Double free in Linux kernel net xen-netback driver
• Debian update for linux