{"id":"CVE-2026-98899","title":"netfilter: ipset: mark the rcu locked areas properly","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ipset: mark the rcu locked areas properly\n\nWhen we bump the uref counter, there's no need to keep\nthe rcu lock because the referred hash table can't\ndisappea…","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvssSource":"cna","vendor":"Linux","product":"Linux","affected":["Linux >= f66ee0410b1c3481ee75e5db9b34547b4d582465 < 67bd3d2350d17c2f4fb158c3f917c10b15ecbc94","Linux >= f66ee0410b1c3481ee75e5db9b34547b4d582465 < 892399abd1a005a455d5b74d86d82b9773405f2b","Linux >= f66ee0410b1c3481ee75e5db9b34547b4d582465 < eee5172741b2c0e73210020732043e5d589295d3","Linux >= f66ee0410b1c3481ee75e5db9b34547b4d582465 < ecb48c6b9edc78de8dd456c365727ae14b88c1ee","Linux >= f66ee0410b1c3481ee75e5db9b34547b4d582465 < 0c46c9ce24130657ec7460c27fba5d445f5abd06","Linux >= f66ee0410b1c3481ee75e5db9b34547b4d582465 < ca9fab1ca15534cef1630e81a479e94b3bbcdb6a","Linux >= f66ee0410b1c3481ee75e5db9b34547b4d582465 < 5d0c22e73656d050daffad10a2ba8765ce8441c8","Linux 5dd9488ae41070b69d2f4acb580f77db5705f9ca","Linux a469bab3386aebff33c59506f3a95e35b91118fd","Linux >= 5.4.24 < 5.5","Linux >= 5.5.8 < 5.6","Linux 5.6"],"published":"2026-10-23","updated":"2026-10-26","sourceUpdated":"2026-10-26T06:56:26.708Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98899","references":[{"url":"https://git.kernel.org/stable/c/67bd3d2350d17c2f4fb158c3f917c10b15ecbc94"},{"url":"https://git.kernel.org/stable/c/892399abd1a005a455d5b74d86d82b9773405f2b"},{"url":"https://git.kernel.org/stable/c/eee5172741b2c0e73210020732043e5d589295d3"},{"url":"https://git.kernel.org/stable/c/ecb48c6b9edc78de8dd456c365727ae14b88c1ee"},{"url":"https://git.kernel.org/stable/c/0c46c9ce24130657ec7460c27fba5d445f5abd06"},{"url":"https://git.kernel.org/stable/c/ca9fab1ca15534cef1630e81a479e94b3bbcdb6a"},{"url":"https://git.kernel.org/stable/c/5d0c22e73656d050daffad10a2ba8765ce8441c8"}],"tags":["cve.org"],"epss":0.00169,"epssPercentile":0.06286,"ingestedAt":"2026-10-23T13:24:55.575Z","slug":"CVE-2026-98899","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ipset: mark the rcu locked areas properly\n\nWhen we bump the uref counter, there's no need to keep\nthe rcu lock because the referred hash table can't\ndisappear. Also, from the same reason in mtype_gc we\nneed the rcu lock and not a spinlock.\n\n## Affected\n\n- `Linux >= f66ee0410b1c3481ee75e5db9b34547b4d582465 < 67bd3d2350d17c2f4fb158c3f917c10b15ecbc94`\n- `Linux >= f66ee0410b1c3481ee75e5db9b34547b4d582465 < 892399abd1a005a455d5b74d86d82b9773405f2b`\n- `Linux >= f66ee0410b1c3481ee75e5db9b34547b4d582465 < eee5172741b2c0e73210020732043e5d589295d3`\n- `Linux >= f66ee0410b1c3481ee75e5db9b34547b4d582465 < ecb48c6b9edc78de8dd456c365727ae14b88c1ee`\n- `Linux >= f66ee0410b1c3481ee75e5db9b34547b4d582465 < 0c46c9ce24130657ec7460c27fba5d445f5abd06`\n- `Linux >= f66ee0410b1c3481ee75e5db9b34547b4d582465 < ca9fab1ca15534cef1630e81a479e94b3bbcdb6a`\n- `Linux >= f66ee0410b1c3481ee75e5db9b34547b4d582465 < 5d0c22e73656d050daffad10a2ba8765ce8441c8`\n- `Linux 5dd9488ae41070b69d2f4acb580f77db5705f9ca`\n- `Linux a469bab3386aebff33c59506f3a95e35b91118fd`\n- `Linux >= 5.4.24 < 5.5`\n- `Linux >= 5.5.8 < 5.6`\n- `Linux 5.6`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":228910,"id":"CVE-2026-98899","ts":1792854107045,"field":"cvss","old":null,"new":"7.8"},{"seq":228909,"id":"CVE-2026-98899","ts":1792854107045,"field":"severity","old":"none","new":"high"}]}