The Morning Dev

Only the news worth knowing

‹
 

SecurityFan score 21 · Tier C4 sources

Seven stable kernels with fixes for three Xen vulnerabilities

LWN.net · By jzb ·

The Brief · written from 4 sources

  • Xen Security Advisory 526 (XSA-526, CVE-2026-100080) concerns the Linux xen-netback driver.
  • A guest can trigger a use-after-free when reading network statistics, although the driver protects this data with RCU.

Why it matters

Operators running Xen with Linux xen-netback backends should check whether their hosts are affected and apply the fix from the advisory once it is available to them.

Who’s affected

  • Operators running Xen with Linux xen-netback backends

Hot on the heels of the previous two stable kernels , Greg Kroah-Hartman has announced the release of the 7.3.3 , 6.18.62 , 6.12.116 , 6.6.162 , 6.1.192 , 5.15.225 , and 5.10.274 stable kernels. Each one only contains fixes for three use-after-free vulnerabilities announced today…

Read the full story at lwn.net ↗

Timeline

  1. Xen Security Advisory 526 published on oss-security

  2. Open Source Security

    Xen Security Advisory 526 v1 (CVE-2026-100080) - Linux xen-netback: guest can trigger use-after-free for

  3. Open Source Security

    Xen Security Advisory 527 v1 (CVE-2026-100081) - Linux xen-netback: guest can trigger use-after-free for reading multicast data

  4. Open Source Security

    Xen Security Advisory 528 v1 (CVE-2026-100082) - Linux xen-blkback: guest can trigger use-after-free for reading statistic data

  5. LWN.net

    Seven stable kernels with fixes for three Xen vulnerabilities

Full coverage · 4 sources

How do you feel about this?

0 Comments