CVE-2026-98899High· 7.8▾ TwilightIn the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: mark the rcu locked areas properly When we bump the uref counter, there's no need to keep the rcu lock because the referred hash table can't disappea…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 42.9 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 24.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.2%
— → 7.8
none → high
Last analysed / modified upstream
In the Linux kernel, the following vulnerability has been resolved:
netfilter: ipset: mark the rcu locked areas properly
When we bump the uref counter, there's no need to keep the rcu lock because the referred hash table can't disappear. Also, from the same reason in mtype_gc we need the rcu lock and not a spinlock.
Linux >= f66ee0410b1c3481ee75e5db9b34547b4d582465 < 67bd3d2350d17c2f4fb158c3f917c10b15ecbc94Linux >= f66ee0410b1c3481ee75e5db9b34547b4d582465 < 892399abd1a005a455d5b74d86d82b9773405f2bLinux >= f66ee0410b1c3481ee75e5db9b34547b4d582465 < eee5172741b2c0e73210020732043e5d589295d3Linux >= f66ee0410b1c3481ee75e5db9b34547b4d582465 < ecb48c6b9edc78de8dd456c365727ae14b88c1eeLinux >= f66ee0410b1c3481ee75e5db9b34547b4d582465 < 0c46c9ce24130657ec7460c27fba5d445f5abd06Linux >= f66ee0410b1c3481ee75e5db9b34547b4d582465 < ca9fab1ca15534cef1630e81a479e94b3bbcdb6aLinux >= f66ee0410b1c3481ee75e5db9b34547b4d582465 < 5d0c22e73656d050daffad10a2ba8765ce8441c8Linux 5dd9488ae41070b69d2f4acb580f77db5705f9caLinux a469bab3386aebff33c59506f3a95e35b91118fdLinux >= 5.4.24 < 5.5Linux >= 5.5.8 < 5.6Linux 5.6Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-99118Nonedrm/i915/dmc: Harden DMC firmware payload parsing
CVE-2026-99117Nonenet: bridge: mcast: don't truncate the port group walk on teardown
CVE-2026-99121Noneipv4: avoid divide by zero in fib_rebalance
CVE-2026-99120NoneKVM: x86/mmu: Cope with the SS bit being set in #NPF exit codes
CVE-2026-99119Nonedrm/amdgpu/userq: actually validate userq BOs
CVE-2026-99123Nonevsock/virtio: validate packet source for connected sockets