SB20261023217 - Improper update of reference count in Linux kernel devlink

Description

This security bulletin contains information about 1 vulnerability.

1) Improper update of reference count (CVE-ID: CVE-2026-98953)

CWE-ID: CWE-911 - Improper Update of Reference Count

CVSSv4: 6.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local privileged user to exhaust kernel resources, potentially causing a denial of service.

The vulnerability exists due to improper reference counting in the Linux kernel devlink notification scheduling functions when notification work is already pending or is queued again while running. A local privileged user can repeatedly register and unregister nested devlink instances to leak devlink_rel objects and their indices, potentially exhausting kernel resources and causing a denial of service.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/8c7830e0120e6e1f5084212fd5b79b3092496f87
• https://git.kernel.org/stable/c/8de57bfec3825effb57fe4d25da98ec3b8fda4c6
• https://git.kernel.org/stable/c/c5381ae1cd1481cc431c2bd79460472c6f1d3ce3
• https://git.kernel.org/stable/c/dc2e787b5fb474241c8a6d18fdacb44adc6d571f