In the Linux kernel, the following vulnerability has been resolved: ipe: fix use-after-free when auditing a newly loaded policy new_policy() audits… (CVE-2026-98534)

The vulnerability in the Linux kernel's ipe subsystem involved a use-after-free condition triggered during the auditing of a newly loaded policy. Specifically, the function new_policy() audits the policy after ipe_new_policyfs_node() publishes it and releases the inode lock of the new directory. This allowed a concurrent delete operation to free the policy while ipe_audit_policy_load() was still accessing it, causing a use-after-free. The fix ensures that the successful load is audited while holding the lock, preventing concurrent deletion and use-after-free.

This vulnerability could lead to memory corruption due to use-after-free, which may cause kernel instability or potentially allow escalation of privileges if exploited. However, no known exploits in the wild have been reported.

A fix has been applied to the Linux kernel to audit the policy load under the inode lock, preventing the use-after-free condition. Users should update to the patched kernel version once available. Patch status is not explicitly confirmed in the provided data; therefore, check the vendor advisory for current remediation guidance.