Strix
75K

CVE-2026-100081

HIGHCVSS 7.8/10EPSS 0.24%

Last modified

CVE-2026-100081 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. In the Linux kernel, the following vulnerability has been resolved: xen-netback: defer xenvif_mcast_addr_list_free() In order for the function to legitimately avoid locking/RCU, it needs to run after all TX/RX processing has finished/stopped: Lookups happen from xenvif_start_xmit(), while adds/removes happen from xenvif_tx_action() (called out of xenvif_poll()). Move the call out of xenvif_disconnect_data() (the call to the function from connect()'s error path doesn't require any cleaning up there), and put it past the synchronization point in backend_disconnect(). This is XSA-527 / CVE-2026-100081.. EPSS estimates a 0.24% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: xen-netback: defer xenvif_mcast_addr_list_free() In order for the function to legitimately avoid locking/RCU, it needs to run after all TX/RX processing has finished/stopped: Lookups happen from xenvif_start_xmit(), while adds/removes happen from xenvif_tx_action() (called out of xenvif_poll()). Move the call out of xenvif_disconnect_data() (the call to the function from connect()'s error path doesn't require any cleaning up there), and put it past the synchronization point in backend_disconnect(). This is XSA-527 / CVE-2026-100081.

Metrics

CVSS 3.1
7.8/10

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS Probability
0.24%

15.7th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= b17075d5c1988b83f840d272c795ac17d57ce804, < 96e05a8ce243e2207704e2e7a6e7d1172730f515; >= b17075d5c1988b83f840d272c795ac17d57ce804, < 0e786123e46d08d2247ce93a5435e45ed9f4c5d1; >= b17075d5c1988b83f840d272c795ac17d57ce804, < 990d123d9eaa3ac6c979eed245658676d65ce0db; >= b17075d5c1988b83f840d272c795ac17d57ce804, < 0d515c409033c8e2a645a781be3ca76ab825fc8c; >= b17075d5c1988b83f840d272c795ac17d57ce804, < a6bb2f1fa62c56279bdcdadce28d1310c5e12b62; >= b17075d5c1988b83f840d272c795ac17d57ce804, < 34f0f63dc6dc11895a17bb5672451b6b11622c99; >= b17075d5c1988b83f840d272c795ac17d57ce804, < fb38fc58acb26d74fe8f7b19621fafaae3c040ff
LinuxLinux4.11

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-100081?
In the Linux kernel, the following vulnerability has been resolved: xen-netback: defer xenvif_mcast_addr_list_free() In order for the function to legitimately avoid locking/RCU, it needs to run after all TX/RX processing has finished/stopped: Lookups happen from xenvif_start_xmit(), while adds/removes happen from xenvif_tx_action() (called out of xenvif_poll()). Move the call out of xenvif_disconnect_data() (the call to the function from connect()'s error path doesn't require any cleaning up there), and put it past the synchronization point in backend_disconnect(). This is XSA-527 / CVE-2026-100081.
How severe is CVE-2026-100081?
CVE-2026-100081 has a CVSS score of 7.8/10 (HIGH severity). The EPSS model estimates a 0.24% probability of exploitation in the next 30 days.
How do I fix CVE-2026-100081?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-100081?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST