CVE-2026-97901

The Linux kernel contains a vulnerability in the generic netlink controller where the policy dump keeps pointers to a target family's operation and policy tables in its callback state. Because Netlink only pins the module owning the dump callback (the controller's owner) rather than the target fa...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 5.8. It stems from the generic netlink controller failing to maintain a reference to the target family module during policy dump operations. As a result, after the target family module is unloaded, the memory containing its policies remains...