High severity · published Oct 23, 2026
CVE-2026-98899
netfilter: ipset: mark the rcu locked areas properly
New
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
In the Linux kernel, the following vulnerability has been resolved:
netfilter: ipset: mark the rcu locked areas properly
When we bump the uref counter, there's no need to keep
the rcu lock because the referred hash table can't
disappear. Also, from the same reason in mtype_gc we
need the rcu lock and not a spinlock.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 6% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Linux · Linux
f66ee0410b1c3481ee75e5db9b34547b4d582465 before 67bd3d2350d17c2f4fb158c3f917c10b15ecbc94; f66ee0410b1c3481ee75e5db9b34547b4d582465 before 892399abd1a005a455d5b74d86d82b9773405f2b; f66ee0410b1c3481ee75e5db9b34547b4d582465 before eee5172741b2c0e73210020732043e5d589295d3; f66ee0410b1c3481ee75e5db9b34547b4d582465 before ecb48c6b9edc78de8dd456c365727ae14b88c1ee; f66ee0410b1c3481ee75e5db9b34547b4d582465 before 0c46c9ce24130657ec7460c27fba5d445f5abd06; f66ee0410b1c3481ee75e5db9b34547b4d582465 before ca9fab1ca15534cef1630e81a479e94b3bbcdb6a; +6 more · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-98899
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-98899
git.kernel.org
https://git.kernel.org/stable/c/0c46c9ce24130657ec7460c27fba5d445f5abd06
git.kernel.org
https://git.kernel.org/stable/c/5d0c22e73656d050daffad10a2ba8765ce8441c8
git.kernel.org
https://git.kernel.org/stable/c/67bd3d2350d17c2f4fb158c3f917c10b15ecbc94
git.kernel.org
https://git.kernel.org/stable/c/892399abd1a005a455d5b74d86d82b9773405f2b
git.kernel.org
https://git.kernel.org/stable/c/ca9fab1ca15534cef1630e81a479e94b3bbcdb6a
git.kernel.org
https://git.kernel.org/stable/c/ecb48c6b9edc78de8dd456c365727ae14b88c1ee
More from Linux
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
7.8
CVE-2026-53362
ipv6: account for fraggap on the paged allocation path
7.8
CVE-2026-46300
net: skbuff: preserve shared-frag marker during coalescing
7.8
CVE-2026-31431
crypto: algif_aead - Revert to operating out-of-place