Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix region locking in hash types Region locking introduced in v5.6-rc4 contained three macros to handle the region locks: ahash_bucket_start(), ahash_bucket_end() which gave back the start and end hash bucket values belonging to a given region lock and ahash_region() which should give back the region lock belonging to a given hash bucket. The latter was incorrect which can lead to a race condition between the garbage collector and adding new elements when a hash type of set is defined with timeouts.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
5dd9488ae41070b69d2f4acb580f77db5705f9ca to < 00cfc5fad1491796942a948808afb968a0a3f35baffectedf66ee0410b1c3481ee75e5db9b34547b4d582465 to < 226ce0ec38316d9e3739e73a64b6b8304646c658affectedf66ee0410b1c3481ee75e5db9b34547b4d582465 to < 82c1eb32693bc48251d92532975e19160987e5b9affectedf66ee0410b1c3481ee75e5db9b34547b4d582465 to < aa77294b0f73bb8265987591460cd25b8722c3dfaffectedf66ee0410b1c3481ee75e5db9b34547b4d582465 to < a3dfec485401943e315c394c29afe2db8f9481d6affectedf66ee0410b1c3481ee75e5db9b34547b4d582465 to < e2ab67672b2288521a6146034a971f9a82ffc5c5affectedf66ee0410b1c3481ee75e5db9b34547b4d582465 to < 6e002ecc1c8cfdfc866b9104ab7888da54613e59affectedf66ee0410b1c3481ee75e5db9b34547b4d582465 to < 8478a729c0462273188263136880480729e9efcaaffecteda469bab3386aebff33c59506f3a95e35b91118fdaffected5.4.24 to < 5.4.294affected5.5.8 to < 5.6affected
Linux Linux
Default version status: affected
5.6affected0 to < 5.6unaffected5.4.294 to ≤ 5.4.*unaffected5.10.238 to ≤ 5.10.*unaffected5.15.183 to ≤ 5.15.*unaffected6.1.139 to ≤ 6.1.*unaffected6.6.91 to ≤ 6.6.*unaffected6.12.29 to ≤ 6.12.*unaffected6.14.7 to ≤ 6.14.*unaffected6.15 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/00cfc5fad1491796942a948808afb968a0a3f35b ↗
- https://git.kernel.org/stable/c/226ce0ec38316d9e3739e73a64b6b8304646c658 ↗
- https://git.kernel.org/stable/c/82c1eb32693bc48251d92532975e19160987e5b9 ↗
- https://git.kernel.org/stable/c/aa77294b0f73bb8265987591460cd25b8722c3df ↗
- https://git.kernel.org/stable/c/a3dfec485401943e315c394c29afe2db8f9481d6 ↗
- https://git.kernel.org/stable/c/e2ab67672b2288521a6146034a971f9a82ffc5c5 ↗
- https://git.kernel.org/stable/c/6e002ecc1c8cfdfc866b9104ab7888da54613e59 ↗
- https://git.kernel.org/stable/c/8478a729c0462273188263136880480729e9efca ↗
- https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html ↗
- https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html ↗