---
id: CVE-2026-98899
title: 'netfilter: ipset: mark the rcu locked areas properly'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  netfilter: ipset: mark the rcu locked areas properly

  When we bump the uref counter, there's no need to keep
  the rcu lock because the referred hash table can't
  disappea…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    67bd3d2350d17c2f4fb158c3f917c10b15ecbc94
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    892399abd1a005a455d5b74d86d82b9773405f2b
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    eee5172741b2c0e73210020732043e5d589295d3
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    ecb48c6b9edc78de8dd456c365727ae14b88c1ee
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    0c46c9ce24130657ec7460c27fba5d445f5abd06
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    ca9fab1ca15534cef1630e81a479e94b3bbcdb6a
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    5d0c22e73656d050daffad10a2ba8765ce8441c8
  - Linux < 5.10.271
  - Linux < 5.15.222
  - Linux < 6.1.189
  - Linux < 6.6.158
  - Linux < 6.12.111
  - Linux < 6.18.53
  - Linux (all versions)
published: '2026-10-23'
updated: '2026-10-24'
sourceUpdated: '2026-10-24T14:09:30.135Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-98899'
references:
  - url: 'https://git.kernel.org/stable/c/67bd3d2350d17c2f4fb158c3f917c10b15ecbc94'
  - url: 'https://git.kernel.org/stable/c/892399abd1a005a455d5b74d86d82b9773405f2b'
  - url: 'https://git.kernel.org/stable/c/eee5172741b2c0e73210020732043e5d589295d3'
  - url: 'https://git.kernel.org/stable/c/ecb48c6b9edc78de8dd456c365727ae14b88c1ee'
  - url: 'https://git.kernel.org/stable/c/0c46c9ce24130657ec7460c27fba5d445f5abd06'
  - url: 'https://git.kernel.org/stable/c/ca9fab1ca15534cef1630e81a479e94b3bbcdb6a'
  - url: 'https://git.kernel.org/stable/c/5d0c22e73656d050daffad10a2ba8765ce8441c8'
tags:
  - cve.org
epss: 0.00215
epssPercentile: 0.11281
ingestedAt: '2026-10-23T13:24:55.575Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

netfilter: ipset: mark the rcu locked areas properly

When we bump the uref counter, there's no need to keep
the rcu lock because the referred hash table can't
disappear. Also, from the same reason in mtype_gc we
need the rcu lock and not a spinlock.

## Affected

- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 67bd3d2350d17c2f4fb158c3f917c10b15ecbc94`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 892399abd1a005a455d5b74d86d82b9773405f2b`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < eee5172741b2c0e73210020732043e5d589295d3`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < ecb48c6b9edc78de8dd456c365727ae14b88c1ee`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 0c46c9ce24130657ec7460c27fba5d445f5abd06`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < ca9fab1ca15534cef1630e81a479e94b3bbcdb6a`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 5d0c22e73656d050daffad10a2ba8765ce8441c8`
- `Linux < 5.10.271`
- `Linux < 5.15.222`
- `Linux < 6.1.189`
- `Linux < 6.6.158`
- `Linux < 6.12.111`
- `Linux < 6.18.53`
- `Linux (all versions)`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.