Linux Kernel Netfilter Vulnerability in ipset by Linux

CVE-2026-98899

What is CVE-2026-98899?

In the Linux kernel, a vulnerability was identified in the netfilter subsystem specifically related to ipset. This issue arises from improper management of the RCU (Read-Copy-Update) areas, where the RCU lock is not maintained correctly when incrementing the reference counter for a hash table. This oversight could potentially lead to incorrect behaviors in memory handling. To address this, it is ensured that the RCU lock is properly utilized during operations involving the hash table, thereby enhancing the overall stability and security of the kernel. Users are advised to review their systems and apply necessary updates for secure operation.

References