Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2026-100081— xen-netback: defer xenvif_mcast_addr_list_free()

Quick assessment

Affected

Linux Linux

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 Linux 内核中，以下漏洞已得到修复： xen-netback：推迟调用 xenvif_mcast_addr_list_free() 为了使该函数能够合法地避免使用锁或 RCU（读 - 拷贝 - 更新机制），它必须在所有发送（TX）和接收（RX）处理完成或停止之后执行：查找操作发生在中，而添加/删除操作则发生在中（该函数由调用）。因此，将的调用从中移出（错误路径中的调用无需在此处进行清理），并将其移至中的同步点之后执行。此漏洞编号为 XSA-527 / CVE-2026-100081。

AI Predicted 7.8 Difficulty: Moderate Updated Nov 07, 2026

Possible ATT&CK Techniques 3 AI

T1069 · Permission Groups Discovery T1055 · Process Injection T1548 · Abuse Elevation Control Mechanism

Affected Version Matrix 16

Vendor	Product	Version Range	Status
Linux	Linux	`b17075d5c1988b83f840d272c795ac17d57ce804< 96e05a8ce243e2207704e2e7a6e7d1172730f515`	affected
		`b17075d5c1988b83f840d272c795ac17d57ce804< 0e786123e46d08d2247ce93a5435e45ed9f4c5d1`	affected
		`b17075d5c1988b83f840d272c795ac17d57ce804< 990d123d9eaa3ac6c979eed245658676d65ce0db`	affected
		`b17075d5c1988b83f840d272c795ac17d57ce804< 0d515c409033c8e2a645a781be3ca76ab825fc8c`	affected
		`b17075d5c1988b83f840d272c795ac17d57ce804< a6bb2f1fa62c56279bdcdadce28d1310c5e12b62`	affected
		`b17075d5c1988b83f840d272c795ac17d57ce804< 34f0f63dc6dc11895a17bb5672451b6b11622c99`	affected
		`b17075d5c1988b83f840d272c795ac17d57ce804< fb38fc58acb26d74fe8f7b19621fafaae3c040ff`	affected
		`4.11`	affected
… +8 more rows

Updated Nov 07, 2026

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

xen-netback: defer xenvif_mcast_addr_list_free()

Source: CVE Program / CVE List V5

Vulnerability Description

In the Linux kernel, the following vulnerability has been resolved: xen-netback: defer xenvif_mcast_addr_list_free() In order for the function to legitimately avoid locking/RCU, it needs to run after all TX/RX processing has finished/stopped: Lookups happen from xenvif_start_xmit(), while adds/removes happen from xenvif_tx_action() (called out of xenvif_poll()). Move the call out of xenvif_disconnect_data() (the call to the function from connect()'s error path doesn't require any cleaning up there), and put it past the synchronization point in backend_disconnect(). This is XSA-527 / CVE-2026-100081.

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

N/A

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Linux	Linux	b17075d5c1988b83f840d272c795ac17d57ce804 ~ 96e05a8ce243e2207704e2e7a6e7d1172730f515	-
Linux	Linux	4.11	-

II. Public POCs for CVE-2026-100081

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-100081

请登录查看更多情报信息。

Other References for CVE-2026-100081 (7)

https://www.cve.org/CVERecord?id=CVE-2026-100081

Same Patch Batch · Linux · 2026-11-06 · 3 CVEs total

CVE-2026-100080		xen-netback: Fix UAF when reading statistics data
CVE-2026-100082		xen-blkback: Avoid UAF when reading I/O statistics

IV. Related Vulnerabilities

Same product: Linux

Same vendor: Linux