Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2026-100080— xen-netback: Fix UAF when reading statistics data

Quick assessment

Affected

Linux Linux

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 Linux 内核中，以下漏洞已得到修复： xen-netback：修复读取统计数据时的释放后使用（UAF）漏洞该驱动程序中的网络统计数据由 RCU（读 - 拷贝 - 更新）机制保护。然而，在与前端连接过程中发生错误（例如，由于客户机填写了非法的 Xenstore 数据）后，在拆除队列时，统计数据在未完成 RCU 状态同步的情况下就被释放了。如果在此阶段通过 sysfs 读取该数据，则可能访问已被释放的内存或正在被重新使用的内存。修复方法是：在释放队列数据之前，调用以确保 RCU 状态已同步。此漏洞编号为

AI Predicted 7.8 Difficulty: Moderate Updated Nov 07, 2026

Possible ATT&CK Techniques 1 AI

T1068 · Exploitation for Privilege Escalation

Affected Version Matrix 21

Vendor	Product	Version Range	Status
Linux	Linux	`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2< 4223b33be49ee09acb6f1d26beb4a36dd3b8d63a`	affected
		`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2< ab9cdf1291be551da999510b30216a2886074d7a`	affected
		`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2< 36f858f228e3f955b9336af7f94634747c221518`	affected
		`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2< 89e534265b62c94749639350200b10370564bb3a`	affected
		`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2< 6cd611d2abdd8623a554e14145f82c1cb4e4467a`	affected
		`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2< 37d5a73170579b30e67cc8b19ec69715eea3a6b6`	affected
		`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2< 4867687b6ad28ab84bc0811d8f8f9972e769da02`	affected
		`< 5.10.274`	affected
… +13 more rows

Updated Nov 07, 2026

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

xen-netback: Fix UAF when reading statistics data

Source: CVE Program / CVE List V5

Vulnerability Description

In the Linux kernel, the following vulnerability has been resolved: xen-netback: Fix UAF when reading statistics data The network statistic data in the driver is protected by RCU. Unfortunately when tearing down the queues after an error during connecting to the frontend (e.g. due to illegal Xenstore data filled in by the guest), the statistic data is being freed without synchronizing the RCU state. In case the data is being read via sysfs in this phase, access to already freed memory or memory being in new use is possible. Fix that by calling synchronize_net() before freeing the queue data. This is XSA-526 / CVE-2026-100080

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

N/A

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Linux	Linux	1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ~ 4223b33be49ee09acb6f1d26beb4a36dd3b8d63a	-
Linux	Linux	5.10.274 ~ 5.10.*	-

II. Public POCs for CVE-2026-100080

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-100080

请登录查看更多情报信息。

Other References for CVE-2026-100080 (7)

https://www.cve.org/CVERecord?id=CVE-2026-100080

Same Patch Batch · Linux · 2026-11-06 · 3 CVEs total

CVE-2026-100081		xen-netback: defer xenvif_mcast_addr_list_free()
CVE-2026-100082		xen-blkback: Avoid UAF when reading I/O statistics

IV. Related Vulnerabilities

Same product: Linux

Same vendor: Linux