CYBERSECURITYTRACKER
Permanent story citation

Xen Security Advisory 522 v1 (CVE-2026-98375) - Linux xen-netfront: backend can crash guest via malformed RX packets

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 9869

As cited

Copy frozen at (site build).

vulnerabilities

Xen Security Advisory 522 v1 (CVE-2026-98375) - Linux xen-netfront: backend can crash guest via malformed RX packets

Xen published security advisory CVE-2026-98375 (XSA-522) addressing a denial of service vulnerability in the Linux xen-netfront driver. A malicious network backend can craft malformed receive packets that trigger a crash in the guest operating system when split across multiple slots with an undersized first slot.

Why it matters: Virtual machine operators using Linux guests with xen-netfront should apply the patch immediately, as an untrusted or compromised network backend can crash guest instances.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary