AZL-112837
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-112837.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-112837
- Upstream
- Published
- 2026-11-06T19:17:03Z
- Modified
- 2026-11-07T14:18:06Z
- Summary
- CVE-2026-100082 affecting package kernel 6.6.161.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
xen-blkback: Avoid UAF when reading I/O statistics
Reading I/O statistics via sysfs concurrently with tearing down a frontend device might result in UAF or a NULL dereference, as the reading of the statistics data is not synchronized with freeing the data.
Use a rwlock for synchronizing.
This is XSA-528 / CVE-2026-100082
- References