CVE-2026-98101
kernel: ipv6: mcast: use copy-on-write RCU updates in ip6_mc_source()
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 25, 2026
Updated · October 6, 2026
Description
A flaw was found in the Linux kernel's IPv6 networking subsystem. A race condition in the ip6_mc_source() function allows concurrent packet processing routines to observe inconsistent multicast source filter lists when entries are modified in place. A local user could exploit this flaw by changing multicast socket filter settings during active packet reception, causing torn address reads and corrupted filter state. This vulnerability can lead to improper packet filtering or a Denial of Service (DoS).
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 4.4CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CWE-366 · Race Condition within a Thread