CVE-2026-98899

CVSS 7.8 (high) · published 2026-10-23

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: mark the rcu locked areas properly When we bump the uref counter, there's no need to keep the rcu lock because the referred hash table can't disappear. Also, from the same reason in mtype_gc we need the rcu lock and not a spinlock.

Source: NVD CVE-2026-98899

References

• https://git.kernel.org/stable/c/0c46c9ce24130657ec7460c27fba5d445f5abd06
• https://git.kernel.org/stable/c/5d0c22e73656d050daffad10a2ba8765ce8441c8
• https://git.kernel.org/stable/c/67bd3d2350d17c2f4fb158c3f917c10b15ecbc94
• https://git.kernel.org/stable/c/892399abd1a005a455d5b74d86d82b9773405f2b
• https://git.kernel.org/stable/c/ca9fab1ca15534cef1630e81a479e94b3bbcdb6a
• https://git.kernel.org/stable/c/ecb48c6b9edc78de8dd456c365727ae14b88c1ee
• https://git.kernel.org/stable/c/eee5172741b2c0e73210020732043e5d589295d3

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.