CVE-2026-99286: xen-netback: Fix XenBus connection failure cleanup
Published Nov 10, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
xen-netback: Fix XenBus connection failure cleanup
xenvifgetstats and xenvifgetethtoolstats capture vif->numqueues under rcureadlock. We need to unpublish vif->numqueues before synchronizenet to ensure that readers that come afterwards will not read a non-zero vif->numqueues and attempt to access invalid queues.
This is the same cleanup algorithm as used in backenddisconnect and added in commit b17075d5c198 ("xen-netback: fix race condition on XenBus disconnect").
This is XSA-531
Affected Software
1 affected component
Linux Linux kernel
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch XSA-531
Event History
Nov 10, 2026
CVE Published
via MITRE·06:16 PM
Data Sourced
via MITRE·06:16 PM
Description
Data Sourced
via NVD·07:22 PM
Description