{"schema":"threatline.record/2","record":{"id":"CVE-2026-98252","aliases":[],"summary":"RDMA/core: fix refcount bug in iwpm_get_nlmsg_request()","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/core: fix refcount bug in iwpm_get_nlmsg_request()\n\niwpm_get_nlmsg_request() initializes refcount _after_ list_add_tail()\nmaking it accessible to global list where another CPU can kref_get()\non nlmsg_request causing a refcount \"addition on 0\" bug. Fix this\nby initializing kref _before_ list_add_tail() so refcount for\nnlmsg_request can be incremented/decremented normally. In addition,\nalso initialize every field before list_add_tail().","categories":["Operating systems"],"product":"Linux","vendor":"Linux","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98252","source_modified_at":"2026-10-19T09:16:23.591Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"Linux","vendor":"Linux","versions":[{"version":"30dc5e63d6a5ad24894b5512d10b228d73645a44","lessThan":"52c13c63bb3662c108244e7447055e30bf40244e","status":"affected","versionType":"git"},{"version":"30dc5e63d6a5ad24894b5512d10b228d73645a44","lessThan":"8a91609032d47e77bcb37bc8f6e88d89340d2709","status":"affected","versionType":"git"},{"version":"30dc5e63d6a5ad24894b5512d10b228d73645a44","lessThan":"ce8a379598bd4058081416abea4279fd05a95374","status":"affected","versionType":"git"},{"version":"30dc5e63d6a5ad24894b5512d10b228d73645a44","lessThan":"2fbac8a56004b6ce54fbfe845d4b25da6e0b55e8","status":"affected","versionType":"git"},{"version":"30dc5e63d6a5ad24894b5512d10b228d73645a44","lessThan":"88e429a4e9bac3d2138011c5ca06254331f2587f","status":"affected","versionType":"git"},{"version":"30dc5e63d6a5ad24894b5512d10b228d73645a44","lessThan":"e15eb536be4f646ce683d2867572b2200be877f7","status":"affected","versionType":"git"},{"version":"30dc5e63d6a5ad24894b5512d10b228d73645a44","lessThan":"117871cdb8927542abd7b65ce5995bf0265a8c05","status":"affected","versionType":"git"},{"version":"30dc5e63d6a5ad24894b5512d10b228d73645a44","lessThan":"33fb59da49c4c3f5c2ec9f9d4447a56857a02c02","status":"affected","versionType":"git"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98252","source_modified_at":"2026-10-19T09:16:23.591Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"Linux","vendor":"Linux","versions":[{"version":"3.16","status":"affected"},{"version":"0","lessThan":"3.16","status":"unaffected","versionType":"semver"},{"version":"5.10.271","lessThanOrEqual":"5.10.*","status":"unaffected","versionType":"semver"},{"version":"5.15.222","lessThanOrEqual":"5.15.*","status":"unaffected","versionType":"semver"},{"version":"6.1.189","lessThanOrEqual":"6.1.*","status":"unaffected","versionType":"semver"},{"version":"6.6.158","lessThanOrEqual":"6.6.*","status":"unaffected","versionType":"semver"},{"version":"6.12.112","lessThanOrEqual":"6.12.*","status":"unaffected","versionType":"semver"},{"version":"6.18.54","lessThanOrEqual":"6.18.*","status":"unaffected","versionType":"semver"},{"version":"7.2.8","lessThanOrEqual":"7.2.*","status":"unaffected","versionType":"semver"},{"version":"7.3","lessThanOrEqual":"*","status":"unaffected","versionType":"original_commit_for_fix"}],"defaultStatus":"affected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98252","source_modified_at":"2026-10-19T09:16:23.591Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"52c13c63bb3662c108244e7447055e30bf40244e","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98252","source_modified_at":"2026-10-19T09:16:23.591Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"8a91609032d47e77bcb37bc8f6e88d89340d2709","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98252","source_modified_at":"2026-10-19T09:16:23.591Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"2fbac8a56004b6ce54fbfe845d4b25da6e0b55e8","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98252","source_modified_at":"2026-10-19T09:16:23.591Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"88e429a4e9bac3d2138011c5ca06254331f2587f","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98252","source_modified_at":"2026-10-19T09:16:23.591Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"117871cdb8927542abd7b65ce5995bf0265a8c05","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98252","source_modified_at":"2026-10-19T09:16:23.591Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"33fb59da49c4c3f5c2ec9f9d4447a56857a02c02","basis":"first unaffected version stated in the CVE record"}],"cvss":7,"severity":"High","kev":{"listed":false},"epss":{"probability":0.00122,"percentile":0.01817,"score_date":"2026-10-23"},"published_at":"2026-10-06T08:45:19.393Z","modified_at":"2026-10-19T09:16:23.591Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-98252","fetched_at":"2026-10-23T18:45:31.882637Z","source_modified_at":"2026-10-19T09:16:23.591Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-98252","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://git.kernel.org/stable/c/52c13c63bb3662c108244e7447055e30bf40244e"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/8a91609032d47e77bcb37bc8f6e88d89340d2709"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/ce8a379598bd4058081416abea4279fd05a95374"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/2fbac8a56004b6ce54fbfe845d4b25da6e0b55e8"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/88e429a4e9bac3d2138011c5ca06254331f2587f"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/e15eb536be4f646ce683d2867572b2200be877f7"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/117871cdb8927542abd7b65ce5995bf0265a8c05"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/33fb59da49c4c3f5c2ec9f9d4447a56857a02c02"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-19T09:16:23.591Z","content_hash":"099331ee188fd2868132d93351995402679f738f5fbbb8280a43a21e089a4e84"}}