CVE-2026-98899 (CVSS 7.8)

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: mark the rcu locked areas properly When we bump the uref counter, there's no need to keep the rcu lock because the referred hash table can't disappear. Also, from the same reason in mtype_gc we need the rcu lock and not a spinlock.

Is your site exposed to CVE-2026-98899?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploit Prediction

0.0017

Probability of exploitation

0.06%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

References

Other References

https://git.kernel.org/stable/c/0c46c9ce24130657ec7460c27fba5d445f5abd06 https://git.kernel.org/stable/c/5d0c22e73656d050daffad10a2ba8765ce8441c8 https://git.kernel.org/stable/c/67bd3d2350d17c2f4fb158c3f917c10b15ecbc94 https://git.kernel.org/stable/c/892399abd1a005a455d5b74d86d82b9773405f2b https://git.kernel.org/stable/c/ca9fab1ca15534cef1630e81a479e94b3bbcdb6a https://git.kernel.org/stable/c/ecb48c6b9edc78de8dd456c365727ae14b88c1ee https://git.kernel.org/stable/c/eee5172741b2c0e73210020732043e5d589295d3

Frequently Asked Questions

What is CVE-2026-98899? +

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: mark the rcu locked areas properly When we bump the uref counter, there's no need to keep the rcu lock because the referred hash table can't disappear. Also, from the same reason in mtype_gc we need the rcu lock and not a spinlock. It has a CVSS v3.1 base score of 7.8 (HIGH).

How severe is CVE-2026-98899? +

CVE-2026-98899 has a CVSS v3.1 score of 7.8 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching. The EPSS score is 0.0017, placing it in the 0th percentile for exploitation probability.

How do I check if I'm vulnerable to CVE-2026-98899? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

CVE-2026-98899