Answer in brief
CVE-2026-100081 records a Unknown severity vulnerability in xen-netback: defer xenvif_mcast_addr_list_free(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=b17075d5c1988b83f840d272c795ac17d57ce804 <96e05a8ce243e2207704e2e7a6e7d1172730f515 || >=b17075d5c1988b83f840d272c795ac17d57ce804 <0e786123e46d08d2247ce93a5435e45ed9f4c5d1 || >=b17075d5c1988b83f840d272c795ac17d57ce804 <990d123d9eaa3ac6c979eed245658676d65ce0db || >=b17075d5c1988b83f840d272c795ac17d57ce804 <0d515c409033c8e2a645a781be3ca76ab825fc8c || >=b17075d5c1988b83f840d272c795ac17d57ce804 <a6bb2f1fa62c56279bdcdadce28d1310c5e12b62 || >=b17075d5c1988b83f840d272c795ac17d57ce804 <34f0f63dc6dc11895a17bb5672451b6b11622c99 || >=b17075d5c1988b83f840d272c795ac17d57ce804 <fb38fc58acb26d74fe8f7b19621fafaae3c040ff | 96e05a8ce243e2207704e2e7a6e7d1172730f515, 0e786123e46d08d2247ce93a5435e45ed9f4c5d1, 990d123d9eaa3ac6c979eed245658676d65ce0db, 0d515c409033c8e2a645a781be3ca76ab825fc8c, a6bb2f1fa62c56279bdcdadce28d1310c5e12b62, 34f0f63dc6dc11895a17bb5672451b6b11622c99, fb38fc58acb26d74fe8f7b19621fafaae3c040ff |
| Linux/Linuxgeneric | 4.11 | Not reported |
Published upstream
Nov 6, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Nov 6, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Nov 6, 2026
In the Linux kernel, the following vulnerability has been resolved: xen-netback: defer xenvif_mcast_addr_list_free() In order for the function to legitimately avoid locking/RCU, it needs to run after all TX/RX processing has finished/stopped: Lookups happen from xenvif_start_xmit(), while adds/removes happen from xenvif_tx_action() (called out of xenvif_poll()). Move the call out of xenvif_disconnect_data() (the call to the function from connect()'s error path doesn't require any cleaning up there), and put it past the synchronization point in backend_disconnect(). This is XSA-527 / CVE-2026-100081.
Quoted source text, attributed separately from HOL analysis.