CVE-2026-98534: ipe: fix use-after-free when auditing a newly loaded policy
Published Oct 18, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
ipe: fix use-after-free when auditing a newly loaded policy
newpolicy() audits the policy after ipenewpolicyfsnode() publishes it and drops the new directory's inode lock. A concurrent delete can free the policy while ipeauditpolicyload() is still using it.
Audit the successful load under that lock.
[FW: remove model name according to latest guideline]
Affected Software
1 affected component
Linux Linux kernel
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Audit a successfully loaded IPE policy while holding the new directory's inode lock, before releasing the lock, to prevent concurrent deletion from causing use-after-free.
Event History
Oct 18, 2026
CVE Published
via MITRE·03:17 PM
Data Sourced
via MITRE·03:17 PM
Description
Data Sourced
via NVD·04:17 PM
Description