Ohne Score

CVE-2026-99286xen-netback: Fix XenBus connection failure cleanup

Linux Linux Veröffentlicht: (vor 3 Tagen)

Beschreibung

In the Linux kernel, the following vulnerability has been resolved: xen-netback: Fix XenBus connection failure cleanup xenvif_get_stats and xenvif_get_ethtool_stats capture vif->num_queues under rcu_read_lock. We need to unpublish vif->num_queues before synchronize_net to ensure that readers that come afterwards will not read a non-zero vif->num_queues and attempt to access invalid queues. This is the same cleanup algorithm as used in backend_disconnect and added in commit b17075d5c198 ("xen-netback: fix race condition on XenBus disconnect"). This is XSA-531

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
Linux Linux 6.12.116 – < 6.12.117, 6.18.62 – < 6.18.63, 7.3.3 – < 7.3.4, 5.10.274 – < 5.11, 5.15.225 – < 5.16, 6.1.192 – < 6.2, 6.6.162 – < 6.7
linux linux kernel 6.12.116 – < 6.12.117

Referenzen und Patches