Cpe:2.3:a:linux:xen_netback:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3alinuxxen_netback/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioTue, 10 Nov 2026 21:35:13 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgXen: Linux xen-netback use-after-free in network statistics (CVE-2026-99286)https://feed.craftedsignal.io/briefs/2026-11-xen-netback-uaf/Tue, 10 Nov 2026 21:35:13 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-xen-netback-uaf/A use-after-free vulnerability in the Linux xen-netback driver exists due to missing RCU synchronization during queue teardown.<p>The Linux xen-netback driver contains a use-after-free vulnerability (CVE-2026-99286) related to network statistics. The issue occurs when tearing down queues after an error during connection to the frontend - such as illegal Xenstore data provided by a guest - due to missing RCU synchronization before freeing the network statistics data.</p> mediumadvisory