Cyber ·
Seven stable kernels fix three Xen use-after-free vulnerabilities
Greg Kroah-Hartman announced seven stable kernels with fixes for three Xen use-after-free vulnerabilities. Two can cause denial of service across the Xen host with possible information leakage, and one can allow privilege escalation.
According to a machine translation of an item from the LWN feed, Greg Kroah-Hartman announced stable kernels 7.3.3, 6.18.62, 6.12.116, 6.6.162, 6.1.192, 5.15.225 and 5.10.274. Each contains only fixes for three use-after-free vulnerabilities announced the same day by the Xen security team. The announcement is dated 6 November 2026.
Two of the flaws, CVE-2026-100080 and CVE-2026-100082, can let an attacker cause denial of service across the whole Xen host machine, with possible information leakage. The third, CVE-2026-100081, can allow privilege escalation as well as denial of service on the host. The source text advises Xen users to update.
Rota Nacional does not fix Xen and does not replace the patch from the vendor or the kernel project. To check the scope, consult the original article in the LWN feed, then confirm the CVE identifiers in the official CVE records and in the advisories from the Xen project and the distribution you run. Compare your installed version with the fixed versions before considering the issue closed.
If you use AI to study this advisory, do not paste host names, IP addresses, credentials or configuration snippets without review. Rota's automatic detection covers personal data such as CPF, CNPJ, e-mail, phone numbers and person names; it should not be treated as a filter for infrastructure secrets.
Original source: Sete kernels estáveis incluem correções para três vulnerabilidades do Xen