Linux Kernel Vulnerability in Xen-Netback Component

CVE-2026-99287

What is CVE-2026-99287?

A vulnerability within the Xen-Netback component of the Linux kernel allows for improper handling of ring pointers during unmap operations. When the function xenvif_map_frontend_data_rings() fails while a ring is already mapped, the subsequent call to xenvif_unmap_frontend_data_rings() fails to zero out the ring pointers. This oversight can lead to potential security weaknesses when the cleanup path of xenvif_connect_data() again invokes this unmap process, leading to unintended consequences. The issue has been addressed by ensuring that the ring pointers are zeroed out after unmapping, effectively mitigating the risk of improper access to freed memory regions.

References