CVE-2026-98252 Linux Kernel - Race Condition

Linux kernel contains a reference count bug in iwpm_get_nlmsg_request() caused by improper initialization order of refcount and list_add_tail(), letting concurrent CPUs cause refcount addition on zero, exploit requires concurrent access to global list.

CVSS base score 7.0 /10
High
CISA KEV
Not listed
Public exploit
None known
EPSS
0.12% chance of exploitation in 30 days
View the NVD record ↗