CVE-2026-100082 is a vulnerability in Linux Kernel
Published on November 6, 2026
xen-blkback: Avoid UAF when reading I/O statistics
In the Linux kernel, the following vulnerability has been resolved:
xen-blkback: Avoid UAF when reading I/O statistics
Reading I/O statistics via sysfs concurrently with tearing down a
frontend device might result in UAF or a NULL dereference, as the
reading of the statistics data is not synchronized with freeing the
data.
Use a rwlock for synchronizing.
This is XSA-528 / CVE-2026-100082
Products Associated with CVE-2026-100082
Want to know whenever a new CVE is published for Linux Kernel? stack.watch will email you.
Affected Versions
Linux:- Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and below 253cff0526781e28b1b0f9fdacd74ecdc23d3ab7 is affected.
- Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and below 2c9ccbe0ffcff3615c7ad917c49b67571a41f21c is affected.
- Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and below 58ba056991dbcec8a75e6861cb4479ac947b69e6 is affected.
- Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and below fe9ead8c5bdb752e329cecfecbdb5dfca5e9996b is affected.
- Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and below b764e17313534794aeb99c901869f213e36a16ef is affected.
- Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and below c49934da934cf495faf782aa5d84f413221c9be6 is affected.
- Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and below b0378161c28e77e4d0e2eda3c9433ab4394d2a2f is affected.
- Before 5.10.274 is affected.
- Before 5.15.225 is affected.
- Before 6.1.192 is affected.
- Before 6.6.162 is affected.
- Before 6.12.116 is affected.
- Before 6.18.62 is affected.
- Before 7.3.3 is affected.
- Version 5.10.274, <= 5.10.* is unaffected.
- Version 5.15.225, <= 5.15.* is unaffected.
- Version 6.1.192, <= 6.1.* is unaffected.
- Version 6.6.162, <= 6.6.* is unaffected.
- Version 6.12.116, <= 6.12.* is unaffected.
- Version 6.18.62, <= 6.18.* is unaffected.
- Version 7.3.3, <= 7.3.* is unaffected.