CVE-2026-98252
High
Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() iwpm_get_nlmsg_request() initializes refcount _after_ list_add_tail() making it accessible to global list where another CPU can kref_get() on nlmsg_request causing a refcount "addition on 0" bug. Fix this by initializing kref _before_ list_add_tail() so refcount for nlmsg_request can be incremented/decremented normally. In addition, also initialize every field before list_add_tail().
SeverityHigh
CVSS7.0
Exploit probability—
Product
Linux
PublishedOct 6, 2026
First seenOct 6, 2026
How to fix
Update
- Linux Linux52c13c63bb3662c108244e7447055e30bf40244e, 8a91609032d47e77bcb37bc8f6e88d89340d2709, ce8a379598bd4058081416abea4279fd05a95374, 2fbac8a56004b6ce54fbfe845d4b25da6e0b55e8, 88e429a4e9bac3d2138011c5ca06254331f2587f, e15eb536be4f646ce683d2867572b2200be877f7, 117871cdb8927542abd7b65ce5995bf0265a8c05, 33fb59da49c4c3f5c2ec9f9d4447a56857a02c02 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 30dc5e63d6a5ad24894b5512d10b228d73645a44 ≤ v < 52c13c63bb3662c108244e7447055e30bf40244e, 30dc5e63d6a5ad24894b5512d10b228d73645a44 ≤ v < 8a91609032d47e77bcb37bc8f6e88d89340d2709, 30dc5e63d6a5ad24894b5512d10b228d73645a44 ≤ v < ce8a379598bd4058081416abea4279fd05a95374, 30dc5e63d6a5ad24894b5512d10b228d73645a44 ≤ v < 2fbac8a56004b6ce54fbfe845d4b25da6e0b55e8, 30dc5e63d6a5ad24894b5512d10b228d73645a44 ≤ v < 88e429a4e9bac3d2138011c5ca06254331f2587f, 30dc5e63d6a5ad24894b5512d10b228d73645a44 ≤ v < e15eb536be4f646ce683d2867572b2200be877f7, 30dc5e63d6a5ad24894b5512d10b228d73645a44 ≤ v < 117871cdb8927542abd7b65ce5995bf0265a8c05, 30dc5e63d6a5ad24894b5512d10b228d73645a44 ≤ v < 33fb59da49c4c3f5c2ec9f9d4447a56857a02c02, 3.16 | 52c13c63bb3662c108244e7447055e30bf40244e, 8a91609032d47e77bcb37bc8f6e88d89340d2709, ce8a379598bd4058081416abea4279fd05a95374, 2fbac8a56004b6ce54fbfe845d4b25da6e0b55e8, 88e429a4e9bac3d2138011c5ca06254331f2587f, e15eb536be4f646ce683d2867572b2200be877f7, 117871cdb8927542abd7b65ce5995bf0265a8c05, 33fb59da49c4c3f5c2ec9f9d4447a56857a02c02 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.