CVE-2026-100080

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A Use-After-Free (UAF) issue exists in the xen-netback driver. The network statistic data is protected by Read-Copy-Update (RCU), a synchronization mechanism that allows multiple readers to access data while it is being updated. When queues are torn down following a connection error with the frontend, the statistic data is freed without synchronizing the RCU state. This can lead to a situation where memory is accessed via sysfs after it has already been freed or repurposed.

Recommendations Call the synchronize net() function before freeing the queue data.