CVE-2026-100081 is a vulnerability in Linux Kernel
Published on November 6, 2026
xen-netback: defer xenvif_mcast_addr_list_free()
In the Linux kernel, the following vulnerability has been resolved:
xen-netback: defer xenvif_mcast_addr_list_free()
In order for the function to legitimately avoid locking/RCU, it needs to
run after all TX/RX processing has finished/stopped: Lookups happen from
xenvif_start_xmit(), while adds/removes happen from xenvif_tx_action()
(called out of xenvif_poll()).
Move the call out of xenvif_disconnect_data() (the call to the function
from connect()'s error path doesn't require any cleaning up there), and
put it past the synchronization point in backend_disconnect().
This is XSA-527 / CVE-2026-100081.
Products Associated with CVE-2026-100081
Want to know whenever a new CVE is published for Linux Kernel? stack.watch will email you.
Affected Versions
Linux:- Version b17075d5c1988b83f840d272c795ac17d57ce804 and below 96e05a8ce243e2207704e2e7a6e7d1172730f515 is affected.
- Version b17075d5c1988b83f840d272c795ac17d57ce804 and below 0e786123e46d08d2247ce93a5435e45ed9f4c5d1 is affected.
- Version b17075d5c1988b83f840d272c795ac17d57ce804 and below 990d123d9eaa3ac6c979eed245658676d65ce0db is affected.
- Version b17075d5c1988b83f840d272c795ac17d57ce804 and below 0d515c409033c8e2a645a781be3ca76ab825fc8c is affected.
- Version b17075d5c1988b83f840d272c795ac17d57ce804 and below a6bb2f1fa62c56279bdcdadce28d1310c5e12b62 is affected.
- Version b17075d5c1988b83f840d272c795ac17d57ce804 and below 34f0f63dc6dc11895a17bb5672451b6b11622c99 is affected.
- Version b17075d5c1988b83f840d272c795ac17d57ce804 and below fb38fc58acb26d74fe8f7b19621fafaae3c040ff is affected.
- Version 4.11 is affected.
- Before 4.11 is unaffected.
- Version 5.10.274, <= 5.10.* is unaffected.
- Version 5.15.225, <= 5.15.* is unaffected.
- Version 6.1.192, <= 6.1.* is unaffected.
- Version 6.6.162, <= 6.6.* is unaffected.
- Version 6.12.116, <= 6.12.* is unaffected.
- Version 6.18.62, <= 6.18.* is unaffected.
- Version 7.3.3, <= 7.3.* is unaffected.