Astra Linux – Vulnerability in Linux 5.10, Linux

Several Linux PV device frontends are vulnerable to attacks by backends that use grant table interfaces to remove access rights from resources. This can lead to potential data leaks, data corruption by malicious backends, and denial of service attacks. The backends that use these interfaces may n...

Linux Distros Unpatched Vulnerability : CVE-2026-90310

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xen/xenbus: check otherendid only after it has been initialized When device just got initialized for example on module load, the otherendid field is initialized...

CVE-2026-90310

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

DEBIAN-CVE-2026-90310

In the Linux kernel, the following vulnerability has been resolved: xen/xenbus: check otherendid only after it has been initialized When device just got initialized for example on module load, the otherendid field is initialized only after xenbusreadotherenddetails gets called. If xenstore watch...

CVE-2026-90310

...

CVE-2026-90310

CVE-2026-90310 affects the Linux kernel 's xen/xenbus driver. A race condition exists where the xenstore watch thread (xenwatch ) can trigger xenbus_dev_changed() before the otherend_id field is initialized during device probe (e.g., on module load). The still-zeroed otherend_id is then misinterp...

EUVD-2026-81971

In the Linux kernel, the following vulnerability has been resolved: xen/xenbus: check otherendid only after it has been initialized When device just got initialized for example on module load, the otherendid field is initialized only after xenbusreadotherenddetails gets called. If xenstore watch...

CVE-2026-90310 xen/xenbus: check otherend_id only after it has been initialized

In the Linux kernel, the following vulnerability has been resolved: xen/xenbus: check otherendid only after it has been initialized When device just got initialized for example on module load, the otherendid field is initialized only after xenbusreadotherenddetails gets called. If xenstore watch...

PT-2026-94658

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the xenbus component of the Linux kernel during device initialization. The otherend id field is initialized only after the xenbus read otherend details functio...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: xenbus: Use kref to track the lifetime of requests. Marek reported seeing a NULL pointer fault in the xenbusthread call stack: BUG: NULL pointer dereferencing in the kernel; address: 0000000000000000 RIP:...

Astra Linux – Vulnerability in Linux 5.10, Linux

Several Linux PV device frontends are vulnerable to attacks by backends that use grant table interfaces to remove access rights from resources. This can lead to potential data leaks, data corruption by malicious backends, and denial of service attacks. The backends that use these interfaces may n...

Astra Linux – Vulnerability in Linux 5.10, Linux

Several Linux PV device frontends are vulnerable to attacks by backends that use grant table interfaces to remove access rights from resources. This can lead to potential data leaks, data corruption by malicious backends, and denial of service attacks. The backends that use these interfaces may n...

Astra Linux – Vulnerability in Linux 5.10, Linux

Several Linux PV device frontends are vulnerable to attacks by backends that use grant table interfaces to remove access rights from resources. This can lead to potential data leaks, data corruption by malicious backends, and denial of service attacks. The backends that use these interfaces may n...

Astra Linux – Vulnerability in Linux 5.10, Linux

Several Linux PV device frontends are vulnerable to attacks by backends that use grant table interfaces to remove access rights from resources. This can lead to potential data leaks, data corruption by malicious backends, and denial of service attacks. The backends that use these interfaces may n...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107330)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107330 advisory. In the Linux kernel, the following vulnerability has been resolved: xenbus: Use kref to track req lifetime Marek reported seeing a NULL pointer fault in the...

UBUNTU-CVE-2026-79604

oxenstored: Unbounded accumulation of watches: Oxenstored maintains two datastructures about watches; one global trie, and one hashtable tracked per domain. When a xenbus reconnect is requested, watches are not cleared out of the global trie. A guest can cause unbounded memory usage in oxenstored...

CVE-2026-79604

oxenstored: Unbounded accumulation of watches: Oxenstored maintains two datastructures about watches; one global trie, and one hashtable tracked per domain. When a xenbus reconnect is requested, watches are not cleared out of the global trie. A guest can cause unbounded memory usage in oxenstored...

oxenstored: Unbounded accumulation of watches

ISSUE DESCRIPTION Oxenstored maintains two datastructures about watches; one global trie, and one hashtable tracked per domain. When a xenbus reconnect is requested, watches are not cleared out of the global trie. IMPACT A guest can cause unbounded memory usage in oxenstored. This can lead to a...

PT-2026-95552

oxenstored: Unbounded accumulation of watches: Oxenstored maintains two datastructures about watches; one global trie, and one hashtable tracked per domain. When a xenbus reconnect is requested, watches are not cleared out of the global trie. A guest can cause unbounded memory usage in oxenstored...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098680)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098680 advisory. In the Linux kernel, the following vulnerability has been resolved: xenbus: Use kref to track req lifetime Marek reported seeing a NULL pointer fault in the...