{"schema":"threatline.record/2","record":{"id":"CVE-2026-98899","aliases":[],"summary":"netfilter: ipset: mark the rcu locked areas properly","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ipset: mark the rcu locked areas properly\n\nWhen we bump the uref counter, there's no need to keep\nthe rcu lock because the referred hash table can't\ndisappear. Also, from the same reason in mtype_gc we\nneed the rcu lock and not a spinlock.","categories":["Operating systems"],"product":"Linux","vendor":"Linux","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98899","source_modified_at":"2026-10-23T11:54:09.249Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"Linux","vendor":"Linux","versions":[{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"67bd3d2350d17c2f4fb158c3f917c10b15ecbc94","status":"affected","versionType":"git"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"892399abd1a005a455d5b74d86d82b9773405f2b","status":"affected","versionType":"git"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"eee5172741b2c0e73210020732043e5d589295d3","status":"affected","versionType":"git"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"ecb48c6b9edc78de8dd456c365727ae14b88c1ee","status":"affected","versionType":"git"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"0c46c9ce24130657ec7460c27fba5d445f5abd06","status":"affected","versionType":"git"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"ca9fab1ca15534cef1630e81a479e94b3bbcdb6a","status":"affected","versionType":"git"},{"version":"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","lessThan":"5d0c22e73656d050daffad10a2ba8765ce8441c8","status":"affected","versionType":"git"},{"version":"0","lessThan":"5.10.271","status":"affected","versionType":"semver"},{"version":"0","lessThan":"5.15.222","status":"affected","versionType":"semver"},{"version":"0","lessThan":"6.1.189","status":"affected","versionType":"semver"},{"version":"0","lessThan":"6.6.158","status":"affected","versionType":"semver"},{"version":"0","lessThan":"6.12.111","status":"affected","versionType":"semver"},{"version":"0","lessThan":"6.18.53","status":"affected","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98899","source_modified_at":"2026-10-23T11:54:09.249Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"Linux","vendor":"Linux","versions":[{"version":"5.10.271","lessThanOrEqual":"5.10.*","status":"unaffected","versionType":"semver"},{"version":"5.15.222","lessThanOrEqual":"5.15.*","status":"unaffected","versionType":"semver"},{"version":"6.1.189","lessThanOrEqual":"6.1.*","status":"unaffected","versionType":"semver"},{"version":"6.6.158","lessThanOrEqual":"6.6.*","status":"unaffected","versionType":"semver"},{"version":"6.12.111","lessThanOrEqual":"6.12.*","status":"unaffected","versionType":"semver"},{"version":"6.18.53","lessThanOrEqual":"6.18.*","status":"unaffected","versionType":"semver"},{"version":"7.2","lessThanOrEqual":"*","status":"unaffected","versionType":"original_commit_for_fix"}],"defaultStatus":"affected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98899","source_modified_at":"2026-10-23T11:54:09.249Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"Linux","ecosystem":null},"version":"67bd3d2350d17c2f4fb158c3f917c10b15ecbc94","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98899","source_modified_at":"2026-10-23T11:54:09.249Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"Linux","ecosystem":null},"version":"892399abd1a005a455d5b74d86d82b9773405f2b","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98899","source_modified_at":"2026-10-23T11:54:09.249Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"Linux","ecosystem":null},"version":"0c46c9ce24130657ec7460c27fba5d445f5abd06","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98899","source_modified_at":"2026-10-23T11:54:09.249Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"Linux","ecosystem":null},"version":"5d0c22e73656d050daffad10a2ba8765ce8441c8","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98899","source_modified_at":"2026-10-23T11:54:09.249Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"Linux","ecosystem":null},"version":"5.10.271","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98899","source_modified_at":"2026-10-23T11:54:09.249Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"Linux","ecosystem":null},"version":"5.15.222","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98899","source_modified_at":"2026-10-23T11:54:09.249Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"Linux","ecosystem":null},"version":"6.1.189","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98899","source_modified_at":"2026-10-23T11:54:09.249Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"Linux","ecosystem":null},"version":"6.6.158","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98899","source_modified_at":"2026-10-23T11:54:09.249Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"Linux","ecosystem":null},"version":"6.12.111","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-98899","source_modified_at":"2026-10-23T11:54:09.249Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"Linux","ecosystem":null},"version":"6.18.53","basis":"first unaffected version stated in the CVE record"}],"cvss":null,"severity":null,"kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-10-23T11:54:09.249Z","modified_at":"2026-10-23T11:54:09.249Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-98899","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23T11:54:09.249Z"}],"sources":["CVE List"],"references":[{"source":"CVE List","url":"https://git.kernel.org/stable/c/67bd3d2350d17c2f4fb158c3f917c10b15ecbc94"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/892399abd1a005a455d5b74d86d82b9773405f2b"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/eee5172741b2c0e73210020732043e5d589295d3"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/ecb48c6b9edc78de8dd456c365727ae14b88c1ee"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/0c46c9ce24130657ec7460c27fba5d445f5abd06"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/ca9fab1ca15534cef1630e81a479e94b3bbcdb6a"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/5d0c22e73656d050daffad10a2ba8765ce8441c8"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-23T11:54:09.249Z","content_hash":"11083797fc28ae028d193a51599fc11e29a026887bc0524fae2f5e5790fd3cad"}}