CVE-2026-98899
Published Oct 23, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: mark the rcu locked areas properly When we bump the uref counter, there's no need to keep the rcu lock because the referred hash table can't disappear. Also, from the same reason in mtype_gc we need the rcu lock and not a spinlock.
Is your site exposed to CVE-2026-98899?
Run a free security scan — no signup, results in seconds.
References
Other References
https://git.kernel.org/stable/c/0c46c9ce24130657ec7460c27fba5d445f5abd06
https://git.kernel.org/stable/c/5d0c22e73656d050daffad10a2ba8765ce8441c8
https://git.kernel.org/stable/c/67bd3d2350d17c2f4fb158c3f917c10b15ecbc94
https://git.kernel.org/stable/c/892399abd1a005a455d5b74d86d82b9773405f2b
https://git.kernel.org/stable/c/ca9fab1ca15534cef1630e81a479e94b3bbcdb6a
https://git.kernel.org/stable/c/ecb48c6b9edc78de8dd456c365727ae14b88c1ee
https://git.kernel.org/stable/c/eee5172741b2c0e73210020732043e5d589295d3
Frequently Asked Questions
What is CVE-2026-98899? +
In the Linux kernel, the following vulnerability has been resolved:
netfilter: ipset: mark the rcu locked areas properly
When we bump the uref counter, there's no need to keep
the rcu lock because the referred hash table can't
disappear. Also, from the same reason in mtype_gc we
need the rcu lock and not a spinlock.
How do I check if I'm vulnerable to CVE-2026-98899? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.