CVE-2026-97901

In the Linux kernel, the following vulnerability has been resolved: genetlink: pin family module during policy dump The generic netlink controller's policy dump keeps pointers to the target family's operation and policy tables in its callback state. A dump may be split across multiple skbs and remain pending after the initial request. Netlink pins the module which owns the dump callback, but in this case that is the controller's owner rather than the target family's owner. The target family can consequently be unregistered and its module unloaded while a policy dump is pending. Advancing the dump then dereferences policy memory from the unloaded module. Take a reference to the target family's module when the dump starts. Drop it from the error and done paths. This matches the lifetime for which the dump context retains the family and policy pointers.

• https://git.kernel.org/stable/c/508387ad95ef9c13aa6431678c39763e882da2dc
• https://git.kernel.org/stable/c/6a1094c34d176827b2b173e163dcc964a13af93f
• https://git.kernel.org/stable/c/6d8e653fcf1c90310797eeba8e5fafe9ccc3de9e

Published

Sep 25, 2026

Last Modified

Sep 25, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-97895A vulnerability was determined in krayin laravel-crm up to 2…6.3
• CVE-2026-97896A vulnerability was identified in krayin laravel-crm up to 2…3.5
• CVE-2026-97897A security flaw has been discovered in Krayin laravel-crm up…3.5
• CVE-2026-97898Insecure Direct Object Reference / missing object-level auth…8.4
• CVE-2026-97899In the Linux kernel, the following vulnerability has been re…
• CVE-2026-97900In the Linux kernel, the following vulnerability has been re…
• CVE-2026-97902In the Linux kernel, the following vulnerability has been re…
• CVE-2026-97903In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-97904In the Linux kernel, the following vulnerability has been re…
• CVE-2026-97905In the Linux kernel, the following vulnerability has been re…
• CVE-2026-97906In the Linux kernel, the following vulnerability has been re…
• CVE-2026-97907In the Linux kernel, the following vulnerability has been re…