CVE-2026-90310

CVE-2026-90310 affects the Linux kernel 's xen/xenbus driver. A race condition exists where the xenstore watch thread (xenwatch ) can trigger xenbus_dev_changed() before the otherend_id field is initialized during device probe (e.g., on module load). The still-zeroed otherend_id is then misinterp...

EUVD-2026-81971

In the Linux kernel, the following vulnerability has been resolved: xen/xenbus: check otherendid only after it has been initialized When device just got initialized for example on module load, the otherendid field is initialized only after xenbusreadotherenddetails gets called. If xenstore watch...