{"id":"CVE-2026-98252","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/core: fix refcount bug in iwpm_get_nlmsg_request()\n\niwpm_get_nlmsg_request() initializes refcount _after_ list_add_tail()\nmaking it accessible to global list where…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/core: fix refcount bug in iwpm_get_nlmsg_request()\n\niwpm_get_nlmsg_request() initializes refcount _after_ list_add_tail()\nmaking it accessible to global list where…","severity":"high","cvss":7,"cvssVector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","vendor":"Linux","product":"Linux","affected":["Linux >= 30dc5e63d6a5ad24894b5512d10b228d73645a44 < 52c13c63bb3662c108244e7447055e30bf40244e","Linux >= 30dc5e63d6a5ad24894b5512d10b228d73645a44 < 8a91609032d47e77bcb37bc8f6e88d89340d2709","Linux >= 30dc5e63d6a5ad24894b5512d10b228d73645a44 < ce8a379598bd4058081416abea4279fd05a95374","Linux >= 30dc5e63d6a5ad24894b5512d10b228d73645a44 < 2fbac8a56004b6ce54fbfe845d4b25da6e0b55e8","Linux >= 30dc5e63d6a5ad24894b5512d10b228d73645a44 < 88e429a4e9bac3d2138011c5ca06254331f2587f","Linux >= 30dc5e63d6a5ad24894b5512d10b228d73645a44 < e15eb536be4f646ce683d2867572b2200be877f7","Linux >= 30dc5e63d6a5ad24894b5512d10b228d73645a44 < 117871cdb8927542abd7b65ce5995bf0265a8c05","Linux >= 30dc5e63d6a5ad24894b5512d10b228d73645a44 < 33fb59da49c4c3f5c2ec9f9d4447a56857a02c02","Linux 3.16"],"published":"2026-10-06","updated":"2026-10-07","sourceUpdated":"2026-10-07T07:17:06.380","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-98252","references":[{"url":"https://git.kernel.org/stable/c/117871cdb8927542abd7b65ce5995bf0265a8c05","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/2fbac8a56004b6ce54fbfe845d4b25da6e0b55e8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/33fb59da49c4c3f5c2ec9f9d4447a56857a02c02","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/52c13c63bb3662c108244e7447055e30bf40244e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/88e429a4e9bac3d2138011c5ca06254331f2587f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/8a91609032d47e77bcb37bc8f6e88d89340d2709","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/ce8a379598bd4058081416abea4279fd05a95374","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/e15eb536be4f646ce683d2867572b2200be877f7","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98252.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-98252"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2546476"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-98252"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98252"},{"url":"https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98252.mbox"}],"tags":["nvd","cve.org","csaf","vex","red-hat"],"epss":0.00122,"epssPercentile":0.01934,"ingestedAt":"2026-10-06T08:50:17.430Z","cwe":["CWE-366"],"slug":"CVE-2026-98252","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/core: fix refcount bug in iwpm_get_nlmsg_request()\n\niwpm_get_nlmsg_request() initializes refcount _after_ list_add_tail()\nmaking it accessible to global list where another CPU can kref_get()\non nlmsg_request causing a refcount \"addition on 0\" bug. Fix this\nby initializing kref _before_ list_add_tail() so refcount for\nnlmsg_request can be incremented/decremented normally. In addition,\nalso initialize every field before list_add_tail().\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Vendor advisories\n\n- **Red Hat VEX** · Moderate · affected: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 · no fix planned: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, … · updated 2026-10-10 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98252.json)","depth":"twilight","depthScore":39,"depthScoreParts":{"impact":38.5,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":217290,"id":"CVE-2026-98252","ts":1791361307860,"field":"cvss","old":null,"new":"7"},{"seq":217289,"id":"CVE-2026-98252","ts":1791361307860,"field":"severity","old":"none","new":"high"}]}