https://feed.craftedsignal.io/products/linux-xen-netback/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 11 Nov 2026 03:39:03 +0000https://feed.craftedsignal.io/favicon-32x32.pnghttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svghttps://feed.craftedsignal.io/briefs/2026-11-xen-netback-double-unmap/Wed, 11 Nov 2026 03:39:03 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-xen-netback-double-unmap/A vulnerability in the Linux xen-netback driver allows a guest to trigger a double unmap of memory during connection setup due to a missing test when handling illegal ring index values.<p>The Xen Security Advisory XSA-532 (CVE-2026-99287) identifies an issue in the Linux xen-netback driver. During the connection setup to a frontend, the backend maps ring pages and validates their contents. If the ring index values are illegal, the driver attempts to unmap all allocated resources; however, a missing test during this cleanup process allows a guest to trigger a double unmap of memory.</p> mediumadvisorylinuxkernelvirtualization