Xen-Netback Vulnerability in Linux Kernel Affecting Network Interfaces

CVE-2026-99286

What is CVE-2026-99286?

A race condition exists in the Linux kernel's xen-netback module, affecting the handling of XenBus connections. The issue arises when retrieving statistics related to virtual interfaces, particularly under the RCU read lock. The module fails to unpublish the number of queues before invoking the network synchronization process, which can lead to readers accessing potentially invalid queue data. This flaw mirrors cleanup issues previously identified in related functionalities and requires immediate attention to ensure network operations remain stable and secure.

References