SecurityFan score 20 · Tier C
Xen Security Advisory 526 v1 (CVE-2026-100080) - Linux xen-netback: guest can trigger use-after-free for
The Brief
- Xen Security Advisory 526 (XSA-526, CVE-2026-100080) concerns the Linux xen-netback driver.
- A guest can trigger a use-after-free when reading network statistics, although the driver protects this data with RCU.
Why it matters
Operators running Xen with Linux xen-netback backends should check whether their hosts are affected and apply the fix from the advisory once it is available to them.
Who’s affected
- Operators running Xen with Linux xen-netback backends
- CVE-2026-100080
- #xen
- #linux
- #security
- #use-after-free
- #virtualization
- #cve
Posted by Xen . org security team on Nov 06 Xen Security Advisory CVE-2026-100080 / XSA-526 Linux xen-netback: guest can trigger use-after-free for network statistics reads ISSUE DESCRIPTION ================= The network statistic data in the driver is protected by RCU…
Timeline
Xen Security Advisory 526 published on oss-security
Open Source Security
Xen Security Advisory 526 v1 (CVE-2026-100080) - Linux xen-netback: guest can trigger use-after-free for