CVE-2026-99287 is a vulnerability in Linux Kernel
Published on November 10, 2026
xen-netback: Zero out sring pointers on unmap
In the Linux kernel, the following vulnerability has been resolved:
xen-netback: Zero out sring pointers on unmap
If xenvif_map_frontend_data_rings() fails when a ring is already mapped,
it unmaps them via xenvif_unmap_frontend_data_rings() which keeps the
ring pointers unchanged. xenvif_connect_data()'s cleanup path calls
xenvif_disconnect_queue() which in turn calls
xenvif_unmap_frontend_data_rings() again, which will attempt to unmap the
pointers a second time.
Zero out the ring pointers after they are unmapped to avoid this issue.
This is XSA-532
Products Associated with CVE-2026-99287
Want to know whenever a new CVE is published for Linux Kernel? stack.watch will email you.
Affected Versions
Linux:- Version 2ac061ce97f413bfbbdd768f7d2e0fda2e8170df and below 87fd475dc4e354088f6534285388e7b061f54b35 is affected.
- Version 2ac061ce97f413bfbbdd768f7d2e0fda2e8170df and below c5f54af611ff6fe1d53fa05d8e87b469dc56122b is affected.
- Version 2ac061ce97f413bfbbdd768f7d2e0fda2e8170df and below e7ba61734d6ad6adfd5bf617052e590743211669 is affected.
- Version 5.5 is affected.
- Before 5.5 is unaffected.
- Version 6.12.117, <= 6.12.* is unaffected.
- Version 6.18.63, <= 6.18.* is unaffected.
- Version 7.3.4, <= 7.3.* is unaffected.