CVE-2026-100082

In the Linux kernel, the following vulnerability has been resolved: xen-blkback: Avoid UAF when reading I/O statistics Reading I/O statistics via sysfs concurrently with tearing down a frontend device might result in UAF or a NULL dereference, as the reading of the statistics data is not...

UBUNTU-CVE-2026-100082

In the Linux kernel, the following vulnerability has been resolved: xen-blkback: Avoid UAF when reading I/O statistics Reading I/O statistics via sysfs concurrently with tearing down a frontend device might result in UAF or a NULL dereference, as the reading of the statistics data is not...

CVE-2026-100082

A flaw was found in the Linux kernel's Xen block backend xen-blkback driver. A race condition occurs when input/output I/O statistics are read through the sysfs interface while a frontend device is being disconnected. Because reading the statistics is not synchronized with freeing device memory, ...

Linux Distros Unpatched Vulnerability : CVE-2026-100082

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xen-blkback: Avoid UAF when reading I/O statistics Reading I/O statistics via sysfs concurrently with tearing down a frontend device might result in UAF or a NU...

CVE-2026-100082

In the Linux kernel, the following vulnerability has been resolved: xen-blkback: Avoid UAF when reading I/O statistics Reading I/O statistics via sysfs concurrently with tearing down a frontend device might result in UAF or a NULL dereference, as the reading of the statistics data is not...

DEBIAN-CVE-2026-100082

In the Linux kernel, the following vulnerability has been resolved: xen-blkback: Avoid UAF when reading I/O statistics Reading I/O statistics via sysfs concurrently with tearing down a frontend device might result in UAF or a NULL dereference, as the reading of the statistics data is not...

CVE-2026-100082

In the Linux kernel, the following vulnerability has been resolved: xen-blkback: Avoid UAF when reading I/O statistics Reading I/O statistics via sysfs concurrently with tearing down a frontend device might result in UAF or a NULL dereference, as the reading of the statistics data is not...

EUVD-2026-118401

In the Linux kernel, the following vulnerability has been resolved: xen-blkback: Avoid UAF when reading I/O statistics Reading I/O statistics via sysfs concurrently with tearing down a frontend device might result in UAF or a NULL dereference, as the reading of the statistics data is not...

CVE-2026-100082

The Linux kernel (versions 4.5 and newer) contains a vulnerability in the xen-blkback driver. The issue stems from a lack of synchronization between reading I/O statistics via sysfs and the freeing of the memory holding that data during frontend device teardown. This race condition can lead to a ...

CVE-2026-100082 xen-blkback: Avoid UAF when reading I/O statistics

In the Linux kernel, the following vulnerability has been resolved: xen-blkback: Avoid UAF when reading I/O statistics Reading I/O statistics via sysfs concurrently with tearing down a frontend device might result in UAF or a NULL dereference, as the reading of the statistics data is not...

CVE-2026-100082 xen-blkback: Avoid UAF when reading I/O statistics

In the Linux kernel, the following vulnerability has been resolved: xen-blkback: Avoid UAF when reading I/O statistics Reading I/O statistics via sysfs concurrently with tearing down a frontend device might result in UAF or a NULL dereference, as the reading of the statistics data is not...

Linux xen-blkback: guest can trigger use-after-free for reading statistic data

ISSUE DESCRIPTION The driver does not serialise reads of the device I/O statistics against the freeing of the memory that holds them. This leads to a use-after-free when reading statistical counters while the device is being torn down. IMPACT This most likely crashes the driver, and possibly the...

Astra Linux – Vulnerability in Linux

A issue was discovered in the Linux kernel versions 3.11 through 5.10.16, as used by Xen. When serving requests to the PV backend, the driver maps grant references provided by the frontend. During this process, errors may occur. In one case, an error encountered earlier might be discarded by late...

Astra Linux – Vulnerability in Linux

A issue was discovered in the Linux kernel through version 5.10.1, as used with Xen up to version 4.14.x. The Linux kernel’s PV block backend expects the kernel thread handler to reset ring-xenblkd to NULL when the thread is stopped. However, the handler may not have enough time to execute if the...

Out-of-bounds accesses in Tapdisk

ISSUE DESCRIPTION Tapdisk is a userspace xen-blkback implementation used by the XAPI toolstack. Several bounds checks have been found to be incorrect. There is no upper bounds check for blkif-lastsect. Passing a value larger than 7 will result in a read or write beyond the mapped grant. This is...

UBUNTU-CVE-2026-45890

In the Linux kernel, the following vulnerability has been resolved: xen-netback: reject zero-queue configuration from guest A malicious or buggy Xen guest can write "0" to the xenbus key "multi-queue-num-queues". The connect function in the backend only validates the upper bound requestednumqueue...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001530)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001530 advisory. An issue was discovered in the Linux kernel 3.11 through 5.10.16, as used by Xen. To service requests to the PV backend, the driver maps grant references provided by...

EUVD-2013-2105

Malware in sbrugna...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414645)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414645 advisory. An issue was discovered in the Linux kernel 3.11 through 5.10.16, as used by Xen. To service requests to the PV backend, the driver maps grant references provided by...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414666)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414666 advisory. An issue was discovered in the Linux kernel through 5.10.1, as used with Xen through 4.14.x. The Linux kernel PV block backend expects the kernel thread handler to...