https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 09 Nov 2026 16:09:51 +0000 https://db.gcve.eu/vuln/certfr-2026-avi-1485 certfr-2026-avi-1485 https://db.gcve.eu/vuln/certfr-2026-avi-1485 https://db.gcve.eu/vuln/fkie_cve-2026-100081 <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>xen-netback: defer xenvif_mcast_addr_list_free()</p> <p>In order for the function to legitimately avoid locking/RCU, it needs to run after all TX/RX processing has finished/stopped: Lookups happen from xenvif_start_xmit(), while adds/removes happen from xenvif_tx_action() (called out of xenvif_poll()).</p> <p>Move the call out of xenvif_disconnect_data() (the call to the function from connect()&#39;s error path doesn&#39;t require any cleaning up there), and put it past the synchronization point in backend_disconnect().</p> <p>This is XSA-527 / CVE-2026-100081.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>xen-netback: defer xenvif_mcast_addr_list_free()</p> <p>In order for the function to legitimately avoid locking/RCU, it needs to run after all TX/RX processing has finished/stopped: Lookups happen from xenvif_start_xmit(), while adds/removes happen from xenvif_tx_action() (called out of xenvif_poll()).</p> <p>Move the call out of xenvif_disconnect_data() (the call to the function from connect()&#39;s error path doesn&#39;t require any cleaning up there), and put it past the synchronization point in backend_disconnect().</p> <p>This is XSA-527 / CVE-2026-100081.</p> https://db.gcve.eu/vuln/fkie_cve-2026-100081 https://db.gcve.eu/vuln/ghsa-4grj-j5m2-48xc <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>xen-netback: defer xenvif_mcast_addr_list_free()</p> <p>In order for the function to legitimately avoid locking/RCU, it needs to run after all TX/RX processing has finished/stopped: Lookups happen from xenvif_start_xmit(), while adds/removes happen from xenvif_tx_action() (called out of xenvif_poll()).</p> <p>Move the call out of xenvif_disconnect_data() (the call to the function from connect()&#39;s error path doesn&#39;t require any cleaning up there), and put it past the synchronization point in backend_disconnect().</p> <p>This is XSA-527 / CVE-2026-100081.</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>xen-netback: defer xenvif_mcast_addr_list_free()</p> <p>In order for the function to legitimately avoid locking/RCU, it needs to run after all TX/RX processing has finished/stopped: Lookups happen from xenvif_start_xmit(), while adds/removes happen from xenvif_tx_action() (called out of xenvif_poll()).</p> <p>Move the call out of xenvif_disconnect_data() (the call to the function from connect()&#39;s error path doesn&#39;t require any cleaning up there), and put it past the synchronization point in backend_disconnect().</p> <p>This is XSA-527 / CVE-2026-100081.</p> https://db.gcve.eu/vuln/ghsa-4grj-j5m2-48xc https://db.gcve.eu/vuln/wid-sec-w-2026-4414 <p>Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen, möglicherweise einen Denial-of-Service-Angriff auszulösen, Daten zu manipulieren oder offenzulegen oder Sicherheitsmaßnahmen zu umgehen.</p> <p>Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen, möglicherweise einen Denial-of-Service-Angriff auszulösen, Daten zu manipulieren oder offenzulegen oder Sicherheitsmaßnahmen zu umgehen.</p> https://db.gcve.eu/vuln/wid-sec-w-2026-4414