CVE-2026-98899
Published: October 28, 2026Last modified: October 28, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: mark the rcu locked areas properly When we bump the uref counter, there's no need to keep the rcu lock because the referred hash table can't disappear. Also, from the same reason in mtype_gc we need the rcu lock and not a spinlock.
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score | 7.8 |
| Attack Vector | LOCAL |
| Attack complexity | LOW |
| Privileges required | LOW |
| User interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality | HIGH |
| Integrity impact | HIGH |
| Availability impact | HIGH |
| Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Status
| Product | Release | Package | Status |
|---|---|---|---|
| Alpaquita Linux | 23 LTS | linux-lts | Fixed (6.1.189-r0) |
| 25 LTS | linux-lts | Fixed (6.12.111-r0) | |
| Stream | linux-lts | Fixed (6.18.53-r0) |
References
- https://git.kernel.org/stable/c/0c46c9ce24130657ec7460c27fba5d445f5abd06
- https://git.kernel.org/stable/c/5d0c22e73656d050daffad10a2ba8765ce8441c8
- https://git.kernel.org/stable/c/67bd3d2350d17c2f4fb158c3f917c10b15ecbc94
- https://git.kernel.org/stable/c/892399abd1a005a455d5b74d86d82b9773405f2b
- https://git.kernel.org/stable/c/ca9fab1ca15534cef1630e81a479e94b3bbcdb6a
- https://git.kernel.org/stable/c/ecb48c6b9edc78de8dd456c365727ae14b88c1ee
- https://git.kernel.org/stable/c/eee5172741b2c0e73210020732043e5d589295d3