Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-72434

netfilter: ipset: make sure gc is properly stopped

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: make sure gc is properly stopped Sashiko noticed that when destroying a set, cancel_delayed_work_sync() was called while gc calls queue_delayed_work() unconditionally which can lead not to properly shutting down the gc.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • f66ee0410b1c3481ee75e5db9b34547b4d582465 to < c940d1b96248c3081b664ede5418078bdc7c8c07affected
  • f66ee0410b1c3481ee75e5db9b34547b4d582465 to < 12088da6add5b003657c8506c5b0fcef835083b8affected
  • f66ee0410b1c3481ee75e5db9b34547b4d582465 to < c78bd5195a5998094a5866df702fbeafda60dafbaffected
  • f66ee0410b1c3481ee75e5db9b34547b4d582465 to < 4a597a87e2e2f608edb6be2c510dc826b4fdfb53affected
  • 5dd9488ae41070b69d2f4acb580f77db5705f9caaffected
  • a469bab3386aebff33c59506f3a95e35b91118fdaffected
  • 5.4.24 to < 5.5affected
  • 5.5.8 to < 5.6affected

Linux Linux

Default version status: affected

  • 5.6affected
  • 0 to < 5.6unaffected
  • 6.12.97 to ≤ 6.12.*unaffected
  • 6.18.40 to ≤ 6.18.*unaffected
  • 7.1.5 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References