CVE-2026-99286
Published Nov 10, 2026
Modified Nov 10, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: xen-netback: Fix XenBus connection failure cleanup xenvif_get_stats and xenvif_get_ethtool_stats capture vif->num_queues under rcu_read_lock. We need to unpublish vif->num_queues before synchronize_net to ensure that readers that come afterwards will not read a non-zero vif->num_queues and attempt to access invalid queues. This is the same cleanup algorithm as used in backend_disconnect and added in commit b17075d5c198 ("xen-netback: fix race condition on XenBus disconnect"). This is XSA-531
Is your site exposed to CVE-2026-99286?
Run a free security scan — no signup, results in seconds.
References
Other References
https://git.kernel.org/stable/c/07aca7d25ce8578fedde49855983a01c537a782b
https://git.kernel.org/stable/c/a97aa838903d15f865d80809f5198ff459c6634a
https://git.kernel.org/stable/c/ade3082dcdee17c5767069883936d64ff83f6c9f
http://www.openwall.com/lists/oss-security/2026/11/10/25
http://xenbits.xen.org/xsa/advisory-531.html
Frequently Asked Questions
What is CVE-2026-99286? +
In the Linux kernel, the following vulnerability has been resolved:
xen-netback: Fix XenBus connection failure cleanup
xenvif_get_stats and xenvif_get_ethtool_stats capture vif->num_queues
under rcu_read_lock. We need to unpublish vif->num_queues before
synchronize_net to ensure that readers that come afterwards will not
read a non-zero vif->num_queues and attempt to access invalid queues.
This is the same cleanup algorithm as used in backend_disconnect and
added in commit b17075d5c198 ("xen-netback: fix race condition on XenBus
disconnect").
This is XSA-531
How do I check if I'm vulnerable to CVE-2026-99286? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.
