Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-98899

netfilter: ipset: mark the rcu locked areas properly

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: mark the rcu locked areas properly When we bump the uref counter, there's no need to keep the rcu lock because the referred hash table can't disappear. Also, from the same reason in mtype_gc we need the rcu lock and not a spinlock.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • f66ee0410b1c3481ee75e5db9b34547b4d582465 to < 67bd3d2350d17c2f4fb158c3f917c10b15ecbc94affected
  • f66ee0410b1c3481ee75e5db9b34547b4d582465 to < 892399abd1a005a455d5b74d86d82b9773405f2baffected
  • f66ee0410b1c3481ee75e5db9b34547b4d582465 to < eee5172741b2c0e73210020732043e5d589295d3affected
  • f66ee0410b1c3481ee75e5db9b34547b4d582465 to < ecb48c6b9edc78de8dd456c365727ae14b88c1eeaffected
  • f66ee0410b1c3481ee75e5db9b34547b4d582465 to < 0c46c9ce24130657ec7460c27fba5d445f5abd06affected
  • f66ee0410b1c3481ee75e5db9b34547b4d582465 to < ca9fab1ca15534cef1630e81a479e94b3bbcdb6aaffected
  • f66ee0410b1c3481ee75e5db9b34547b4d582465 to < 5d0c22e73656d050daffad10a2ba8765ce8441c8affected
  • 5dd9488ae41070b69d2f4acb580f77db5705f9caaffected
  • a469bab3386aebff33c59506f3a95e35b91118fdaffected
  • 5.4.24 to < 5.5affected
  • 5.5.8 to < 5.6affected

Linux Linux

Default version status: affected

  • 5.6affected
  • 0 to < 5.6unaffected
  • 5.10.271 to ≤ 5.10.*unaffected
  • 5.15.222 to ≤ 5.15.*unaffected
  • 6.1.189 to ≤ 6.1.*unaffected
  • 6.6.158 to ≤ 6.6.*unaffected
  • 6.12.111 to ≤ 6.12.*unaffected
  • 6.18.53 to ≤ 6.18.*unaffected
  • 7.2 to ≤ *unaffected

References