Linux Kernel NETFILTER: RCU lock misuse in ipset
CVE-2026-98899 Published on October 23, 2026
netfilter: ipset: mark the rcu locked areas properly
In the Linux kernel, the following vulnerability has been resolved:
netfilter: ipset: mark the rcu locked areas properly
When we bump the uref counter, there's no need to keep
the rcu lock because the referred hash table can't
disappear. Also, from the same reason in mtype_gc we
need the rcu lock and not a spinlock.
Products Associated with CVE-2026-98899
stack.watch emails you whenever new vulnerabilities are published in Linux Kernel or Canonical Ubuntu Linux. Just hit a watch button to start following.
Affected Versions
Linux:- Version f66ee0410b1c3481ee75e5db9b34547b4d582465 and below 67bd3d2350d17c2f4fb158c3f917c10b15ecbc94 is affected.
- Version f66ee0410b1c3481ee75e5db9b34547b4d582465 and below 892399abd1a005a455d5b74d86d82b9773405f2b is affected.
- Version f66ee0410b1c3481ee75e5db9b34547b4d582465 and below eee5172741b2c0e73210020732043e5d589295d3 is affected.
- Version f66ee0410b1c3481ee75e5db9b34547b4d582465 and below ecb48c6b9edc78de8dd456c365727ae14b88c1ee is affected.
- Version f66ee0410b1c3481ee75e5db9b34547b4d582465 and below 0c46c9ce24130657ec7460c27fba5d445f5abd06 is affected.
- Version f66ee0410b1c3481ee75e5db9b34547b4d582465 and below ca9fab1ca15534cef1630e81a479e94b3bbcdb6a is affected.
- Version f66ee0410b1c3481ee75e5db9b34547b4d582465 and below 5d0c22e73656d050daffad10a2ba8765ce8441c8 is affected.
- Version 5dd9488ae41070b69d2f4acb580f77db5705f9ca is affected.
- Version a469bab3386aebff33c59506f3a95e35b91118fd is affected.
- Version 5.4.24 and below 5.5 is affected.
- Version 5.5.8 and below 5.6 is affected.
- Version 5.6 is affected.
- Before 5.6 is unaffected.
- Version 5.10.271, <= 5.10.* is unaffected.
- Version 5.15.222, <= 5.15.* is unaffected.
- Version 6.1.189, <= 6.1.* is unaffected.
- Version 6.6.158, <= 6.6.* is unaffected.
- Version 6.12.111, <= 6.12.* is unaffected.
- Version 6.18.53, <= 6.18.* is unaffected.
- Version 7.2, <= * is unaffected.