BaselineWatch
Desk

CVE-2026-98899

7.8 high Published

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: mark the rcu locked areas properly When we bump the uref counter, there's no need to keep the rcu lock because the referred hash table can't disappear. Also, from the same reason in mtype_gc we need the rcu lock and not a spinlock.

Fix

Microsoft's update · Moderate

  • Release Notes — azl3 kernel 6.6.157.1-1 on Azure Linux 3.0 · build 6.6.159.1-1

From the 2026-Oct release note of Microsoft's Security Update Guide, revised 2026-10-31.

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 8

  1. StatusReceived → PublishedNVD modified 2026-10-26 06:56
  2. StatusPublished → ReceivedNVD modified 2026-10-26 07:17
  3. StatusReceived → PublishedNVD modified 2026-10-24 14:09
  4. StatusPublished → ReceivedNVD modified 2026-10-24 14:16
  5. CVSS7.8 (v3.1, CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)NVD modified 2026-10-24 14:16
  6. StatusReceived → PublishedNVD modified 2026-10-23 11:54
  7. StatusPublished → ReceivedNVD modified 2026-10-23 12:18
  8. First seenunscored · linuxNVD modified 2026-10-23 11:54

Affected (CPE criteria) 0

NVD has not attached CPE configurations yet.

References 7