AZL-112834
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-112834.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-112834
- Upstream
- Published
- 2026-11-06T19:17:03Z
- Modified
- 2026-11-07T14:18:06Z
- Summary
- CVE-2026-100081 affecting package kernel 6.6.161.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
xen-netback: defer xenvif_mcast_addr_list_free()
In order for the function to legitimately avoid locking/RCU, it needs to run after all TX/RX processing has finished/stopped: Lookups happen from xenvif_start_xmit(), while adds/removes happen from xenvif_tx_action() (called out of xenvif_poll()).
Move the call out of xenvif_disconnect_data() (the call to the function from connect()'s error path doesn't require any cleaning up there), and put it past the synchronization point in backend_disconnect().
This is XSA-527 / CVE-2026-100081.
- References