CVE-2026-45890
kernel: xen-netback: reject zero-queue configuration from guest
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · May 27, 2026
Updated · June 28, 2026
Description
A flaw was found in the Linux kernel's xen-netback component. A malicious or buggy Xen guest can exploit this by writing a zero value to the 'multi-queue-num-queues' xenbus key. This improper input validation can trigger a warning in the kernel's memory allocation, leading to a guest-to-host Denial of Service (DoS) on systems configured to panic on warnings.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-1284 · Improper Validation of Specified Quantity in Input