CVE-2026-99286 | Linux Kernel up to 6.12.116/6.18.62/7.3.3 xen-netback xenvif_get_stats/xenvif_get_ethtool_stats num_queues race condition

A vulnerability was found in Linux Kernel up to 6.12.116/6.18.62/7.3.3. It has been classified as very critical. Affected by this vulnerability is the function xenvif_get_stats/xenvif_get_ethtool_stats of the component xen-netback. The manipulation of the argument num_queues leads to race condition.

This vulnerability is referenced as CVE-2026-99286. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More