https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 09 Nov 2026 16:21:14 +0000 https://db.gcve.eu/vuln/cve-2026-100081 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>xen-netback: defer xenvif_mcast_addr_list_free()</p> <p>In order for the function to legitimately avoid locking/RCU, it needs to run after all TX/RX processing has finished/stopped: Lookups happen from xenvif_start_xmit(), while adds/removes happen from xenvif_tx_action() (called out of xenvif_poll()).</p> <p>Move the call out of xenvif_disconnect_data() (the call to the function from connect()&#39;s error path doesn&#39;t require any cleaning up there), and put it past the synchronization point in backend_disconnect().</p> <p>This is XSA-527 / CVE-2026-100081.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>xen-netback: defer xenvif_mcast_addr_list_free()</p> <p>In order for the function to legitimately avoid locking/RCU, it needs to run after all TX/RX processing has finished/stopped: Lookups happen from xenvif_start_xmit(), while adds/removes happen from xenvif_tx_action() (called out of xenvif_poll()).</p> <p>Move the call out of xenvif_disconnect_data() (the call to the function from connect()&#39;s error path doesn&#39;t require any cleaning up there), and put it past the synchronization point in backend_disconnect().</p> <p>This is XSA-527 / CVE-2026-100081.</p> https://db.gcve.eu/vuln/cve-2026-100081