Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2026-99286 Details

Description

In the Linux kernel, the following vulnerability has been resolved: xen-netback: Fix XenBus connection failure cleanup xenvif_get_stats and xenvif_get_ethtool_stats capture vif->num_queues under rcu_read_lock. We need to unpublish vif->num_queues before synchronize_net to ensure that readers that come afterwards will not read a non-zero vif->num_queues and attempt to access invalid queues. This is the same cleanup algorithm as used in backend_disconnect and added in commit b17075d5c198 ("xen-netback: fix race condition on XenBus disconnect"). This is XSA-531

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/07aca7d25ce8578fedde49855983a01c537a782b kernel.org
https://git.kernel.org/stable/c/a97aa838903d15f865d80809f5198ff459c6634a kernel.org
https://git.kernel.org/stable/c/ade3082dcdee17c5767069883936d64ff83f6c9f kernel.org
http://www.openwall.com/lists/oss-security/2026/11/10/25 CVE
http://xenbits.xen.org/xsa/advisory-531.html CVE

Weakness Enumeration

No weakness enumeration is available for this CVE.

Affected Products

No affected product data is available for this CVE.

Change History

2 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2026-99286
NVD Published Date:
Nov 10, 2026
NVD Last Modified:
Nov 10, 2026
Source:
kernel.org
CVE-2026-99286 Details - Not Deferred