Use After Free Vulnerability in Linux Kernel Network Driver

CVE-2026-100080

What is CVE-2026-100080?

A vulnerability exists in the Linux kernel's network driver related to the xen-netback component. The issue arises when statistics data is accessed while the driver is tearing down queues after encountering an error during frontend connection. If this occurs, the memory may be accessed after being freed, leading to unpredictable behavior and potential information leaks. This vulnerability has been addressed by implementing necessary synchronization measures before releasing the queue data.

References