CVE-2026-98099 | Linux Kernel up to 7.2.6/7.3-rc1 IPv6 Multicast net/ipv6/mcast.c ipv6_mc_list/mc_list/mc_tomb race condition

A vulnerability was found in Linux Kernel up to 7.2.6/7.3-rc1. It has been rated as very critical. Impacted is the function __ipv6_dev_mc_dec/ipv6_sock_mc_drop/__ipv6_sock_mc_close/__ipv6_sock_mc_join/mld_del_delrec/__ipv6_dev_mc_inc of the file net/ipv6/mcast.c of the component IPv6 Multicast. This manipulation of the argument ipv6_mc_list/mc_list/mc_tomb causes race condition.

This vulnerability is registered as CVE-2026-98099. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More