Posted by Xen . org security team on Oct 09 Xen Security Advisory CVE-2026-98375 / XSA-522 Linux xen-netfront: backend can crash guest via malformed RX packets ISSUE DESCRIPTION If a RX packet sent from the networking backend to the Linux xen-netfront driver is split into multiple slots and the first slot is shorter than an Ethernet header, a BUG() will crash the guest. This is a backend induced Denial of Service (DoS). IMPACT A malicious network...

Read the full article at oss-security →