In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: mark the rcu locked areas properly When we bump the uref… (CVE-2026-98899)

The vulnerability in the Linux kernel netfilter ipset subsystem was due to improper handling of RCU (Read-Copy-Update) locked areas. Specifically, when incrementing the uref counter, the RCU lock was held unnecessarily because the referred hash table cannot disappear, and in the mtype_gc function, an RCU lock is required instead of a spinlock. This correction addresses synchronization issues that could potentially lead to race conditions or memory corruption.

The vulnerability could have led to synchronization issues within the ipset component of the Linux kernel, potentially causing race conditions or memory corruption. However, no known exploits in the wild have been reported. The exact impact on system security or stability is not detailed in the provided information.

A fix has been implemented in the Linux kernel to properly mark RCU locked areas in the netfilter ipset code. Users should update their Linux kernel to a version that includes this fix. Since no specific patch links or affected versions are provided, users should consult the official Linux kernel advisories or repositories for the fixed version.