In the Linux kernel, the following vulnerability has been resolved:

netfilter: ipset: mark the rcu locked areas properly

When we bump the uref counter, there's no need to keep
the rcu lock because the referred hash table can't
disappear. Also, from the same reason in mtype_gc we
need the rcu lock and not a spinlock.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < 67bd3d2350d17c2f4fb158c3f917c10b15ecbc94
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < 892399abd1a005a455d5b74d86d82b9773405f2b
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < eee5172741b2c0e73210020732043e5d589295d3
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < ecb48c6b9edc78de8dd456c365727ae14b88c1ee
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < 0c46c9ce24130657ec7460c27fba5d445f5abd06
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < ca9fab1ca15534cef1630e81a479e94b3bbcdb6a
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 affected < 5d0c22e73656d050daffad10a2ba8765ce8441c8
0 affected < 5.10.271
0 affected < 5.15.222
0 affected < 6.1.189
0 affected < 6.6.158
0 affected < 6.12.111
0 affected < 6.18.53
Linux Linux affected
Version Status Constraints
5.10.271 unaffected ≤ 5.10.*
5.15.222 unaffected ≤ 5.15.*
6.1.189 unaffected ≤ 6.1.*
6.6.158 unaffected ≤ 6.6.*
6.12.111 unaffected ≤ 6.12.*
6.18.53 unaffected ≤ 6.18.*
7.2 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/0c46c9ce24130657ec7460c27fba5d445f5abd06 cve-icon cve-icon
https://git.kernel.org/stable/c/5d0c22e73656d050daffad10a2ba8765ce8441c8 cve-icon cve-icon
https://git.kernel.org/stable/c/67bd3d2350d17c2f4fb158c3f917c10b15ecbc94 cve-icon cve-icon
https://git.kernel.org/stable/c/892399abd1a005a455d5b74d86d82b9773405f2b cve-icon cve-icon
https://git.kernel.org/stable/c/ca9fab1ca15534cef1630e81a479e94b3bbcdb6a cve-icon cve-icon
https://git.kernel.org/stable/c/ecb48c6b9edc78de8dd456c365727ae14b88c1ee cve-icon cve-icon
https://git.kernel.org/stable/c/eee5172741b2c0e73210020732043e5d589295d3 cve-icon cve-icon
History

Fri, 23 Oct 2026 12:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: mark the rcu locked areas properly When we bump the uref counter, there's no need to keep the rcu lock because the referred hash table can't disappear. Also, from the same reason in mtype_gc we need the rcu lock and not a spinlock.
Title netfilter: ipset: mark the rcu locked areas properly
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-10-23T11:54:09.249Z

Reserved: 2026-09-25T10:25:14.379Z

Link: CVE-2026-98899

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-23T12:18:23.897

Modified: 2026-10-23T12:18:23.897

Link: CVE-2026-98899

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.