CVE-2026-100082 json
xen-blkback: Avoid UAF when reading I/O statistics
published 2026-11-06 2 d ago modified 2026-11-06 2 d ago also EUVD-2026-118401
- cvss
- —
- not scored
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.2%
- EPSS 0.2% chance of exploitation in 30 days, percentile 15%
- public exploits
- 0
- none known
Summary
In the Linux kernel, the following vulnerability has been resolved:
xen-blkback: Avoid UAF when reading I/O statistics
Reading I/O statistics via sysfs concurrently with tearing down a frontend device might result in UAF or a NULL dereference, as the reading of the statistics data is not synchronized with freeing the data.
Use a rwlock for synchronizing.
This is XSA-528 / CVE-2026-100082
Patch / fix
- Linux Linux 5.10.274, 5.15.225, 6.1.192, 6.6.162, 6.12.116, 6.18.62, 7.3.3
- linux Debian 13 6.12.116-1
debian advisories DEBIAN-CVE-2026-100082
- git.kernel.org/stable/c/253cff0526781e28b1b0f9fdacd74ecdc23d3ab7 commit
- git.kernel.org/stable/c/2c9ccbe0ffcff3615c7ad917c49b67571a41f21c commit
- git.kernel.org/stable/c/58ba056991dbcec8a75e6861cb4479ac947b69e6 commit
- git.kernel.org/stable/c/fe9ead8c5bdb752e329cecfecbdb5dfca5e9996b commit
- git.kernel.org/stable/c/b764e17313534794aeb99c901869f213e36a16ef commit
- git.kernel.org/stable/c/c49934da934cf495faf782aa5d84f413221c9be6 commit
- git.kernel.org/stable/c/b0378161c28e77e4d0e2eda3c9433ab4394d2a2f commit
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2026-100082 updated cvss 4.7
kernel: kernel: xen-blkback: Denial of Service via race condition reading I/O statistics
-
Red Hat Enterprise Linux 6 perf, kernel, python-perf, kernel-kdump, kernel-firmware, kernel-bootwrapper, +1 more Red Hat Enterprise Linux 7 perf, kernel, bpftool, kernel-rt, python-perf, kernel-kdump, +8 more Red Hat Enterprise Linux 8 perf, kernel, bpftool, kernel-rt, kernel-core, kernel-tools, +29 more Red Hat Enterprise Linux 9 rv, perf, rtla, kernel, bpftool, libperf, +83 more Red Hat Enterprise Linux 10 kernel Red Hat OpenShift Container Platform 4 openshift/ose-rhel-coreos-8, openshift/ose-rhel-coreos-9not affected: vulnerable code not present
+1 more productsfewer
Red Hat OpenShift Container Platform 5 openshift/ose-rhel-coreos-9, openshift/ose-rhel-coreos-10
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
Exploit prediction
0.24% chance of exploitation in the next 30 days, higher than 15% of all scored CVEs (FIRST EPSS, 2026-11-08).
Affected products
- Linux Linux
Classification
- Technology feeds
References
- git.kernel.org /stable/c/253cff0526781e28b1b0f9fdacd74ecdc23d3ab7
- git.kernel.org /stable/c/2c9ccbe0ffcff3615c7ad917c49b67571a41f21c
- git.kernel.org /stable/c/58ba056991dbcec8a75e6861cb4479ac947b69e6
- git.kernel.org /stable/c/fe9ead8c5bdb752e329cecfecbdb5dfca5e9996b
- git.kernel.org /stable/c/b764e17313534794aeb99c901869f213e36a16ef
- git.kernel.org /stable/c/c49934da934cf495faf782aa5d84f413221c9be6
- git.kernel.org /stable/c/b0378161c28e77e4d0e2eda3c9433ab4394d2a2f
- openwall.com /lists/oss-security/2026/11/06/11
- xenbits.xen.org /xsa/advisory-528.html
Sources
- CVE List CVE-2026-100082
- NVD CVE-2026-100082
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.