Linux Releases Seven Kernels at Once, All Patching Same Xen Vulnerability

Published by

Linux has released seven kernel versions simultaneously, all addressing the same security vulnerabilities in the Xen hypervisor's network and block backend drivers. These patches, which correct use-after-free and race condition issues, were developed by SUSE's security team and are intended to mitigate guest-to-host privilege escalation risks on Xen hosts. The releases range from the latest 7.3.3 to the older 5.10.274, with the latter approaching its end-of-life in December 2026, marking these as some of the final updates for those branches. All seven versions are now available on kernel.org with PGP signatures, showcasing the stable model's effectiveness in delivering coordinated security updates across multiple kernel versions



Linux Releases Seven Kernels at Once, All Patching Same Xen Vulnerability

Greg Kroah-Hartman's Linux stable tree released seven kernels in a matter of minutes, spanning every active branch from the fresh 7.3.3 down to the nearly decade-old 5.10.274. All seven carried the identical trio of security patches, addressing use-after-free and race conditions in the Xen hypervisor's network and block backend drivers. The fixes, authored by SUSE's Juergen Gross and Jan Beulich, pose a guest-to-host privilege-escalation risk on Xen hosts but don't affect typical desktop or laptop users. Because 5.10 and 5.15 reach end-of-life in December 2026, this batch is among the final standard updates for those branches, and all seven are now available on the kernel.org mirrors with PGP signatures.

Linux Releases Seven Kernels at Once, All Patching Same Xen Vulnerability @ Linux Compatible