Race condition in Linux kernel - CVE-2026-98347
Published: October 7, 2026
Vulnerability identifier: #VU153683
CSH Severity: Low
CVSS v4: 5.7 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-98347
CWE-ID: CWE-362
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to cause a denial of service.
The vulnerability exists due to a race condition in the Linux kernel IPoIB interface state handling when a light multicast flush overlaps with interface shutdown. A local user can bring an IPoIB interface down during a multicast flush to cause a denial of service by leaving IPOIB_FLAG_OPER_UP set after shutdown, resulting in endless workqueue retries and an interface teardown deadlock.
Affected software
Linux kernel
Debian Linux
linux (Debian package)
Debian Linux
linux (Debian package)
How to mitigate CVE-2026-98347
Install security update from vendor's repository.
Linux kernel - update to 7.0 rc3
linux (Debian package) - update to 6.12.113-1
linux (Debian package) - update to 6.12.113-1
External References
- https://git.kernel.org/stable/c/188b334a6db36a8e0bfaaf59bc4020639a0f3aad
- https://git.kernel.org/stable/c/1b11e4b55b41d9e69a8e8d07622614202e2eaca9
- https://git.kernel.org/stable/c/1ff3add37c329704ec46181b4ae4f00f9f16ce6f
- https://git.kernel.org/stable/c/326f7d34bd7e64de535566b65c0533b640df5a81
- https://git.kernel.org/stable/c/5ad925d45f28464a5e043c9620880bb6a030da89
- https://git.kernel.org/stable/c/9a141d3dc869d18b2eab35e999f4790a9b84e40f
- https://git.kernel.org/stable/c/b72f38929f4b5aa83161fd3b22a7327207e51ec5
- https://git.kernel.org/stable/c/f973769fb7cb33ba0d4a64b7dcfee0cabaead938