CVE-2026-98102

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the IPv6 multicast implementation where the ip6 mc del1 src() function improperly handles the removal of source filters. When a filter count reaches zero, the function unlinks the source filter from pmc->mca sources and moves it to pmc->mca tomb by updating the sf next variable. Since pmc->mca sources is traversed locklessly under RCU (Read-Copy-Update), a mechanism that allows multiple readers to access data while it is being updated, mutating sf next before a grace period expires diverts concurrent readers to the tombstone list. This causes readers to miss active sources and incorrectly process deleted entries. This behavior can be triggered during operations such as those performed by the ipv6 chk mcast addr() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.