5.5

CVE-2026-31418

netfilter: ipset: drop logically empty buckets in mtype_del

In the Linux kernel, the following vulnerability has been resolved:

netfilter: ipset: drop logically empty buckets in mtype_del

mtype_del() counts empty slots below n->pos in k, but it only drops the
bucket when both n->pos and k are zero. This misses buckets whose live
entries have all been removed while n->pos still points past deleted slots.

Treat a bucket as empty when all positions below n->pos are unused and
release it directly instead of shrinking it further.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 5.4.24 < 5.5
Linux ≫ Linux Kernel Version >= 5.5.8 < 5.6
Linux ≫ Linux Kernel Version >= 5.6.1 < 5.10.253
Linux ≫ Linux Kernel Version >= 5.11 < 5.15.203
Linux ≫ Linux Kernel Version >= 5.16 < 6.1.168
Linux ≫ Linux Kernel Version >= 6.2 < 6.6.134
Linux ≫ Linux Kernel Version >= 6.7 < 6.12.81
Linux ≫ Linux Kernel Version >= 6.13 < 6.18.22
Linux ≫ Linux Kernel Version >= 6.19 < 6.19.12
Linux ≫ Linux Kernel Version5.6 Update-
Linux ≫ Linux Kernel Version5.6 Updaterc4
Linux ≫ Linux Kernel Version5.6 Updaterc5
Linux ≫ Linux Kernel Version5.6 Updaterc6
Linux ≫ Linux Kernel Version5.6 Updaterc7
Linux ≫ Linux Kernel Version7.0 Updaterc1
Linux ≫ Linux Kernel Version7.0 Updaterc2
Linux ≫ Linux Kernel Version7.0 Updaterc3
Linux ≫ Linux Kernel Version7.0 Updaterc4
Linux ≫ Linux Kernel Version7.0 Updaterc5
Linux ≫ Linux Kernel Version7.0 Updaterc6
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.11% 0.018
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/ad92ee87462f9a3061361d392e9dbfe2e5c1c9fb
Patch
https://git.kernel.org/stable/c/6cea34d7ec6829b62f521a37a287f670144a2233
Patch
https://git.kernel.org/stable/c/b7eef00f08b92b0b9efe8ae0df6d0005e6199323
Patch
https://git.kernel.org/stable/c/68ca0eea0af02bed36c5e2c13e9fa1647c31a7d4
Patch
https://git.kernel.org/stable/c/ceacaa76f221a6577aba945bb8873c2e640aeba4
Patch
https://git.kernel.org/stable/c/9862ef9ab0a116c6dca98842aab7de13a252ae02
Patch
https://git.kernel.org/stable/c/58f3a14826d4e6b0d5421f1a64be280b48601ea2
Patch
https://git.kernel.org/stable/c/c098ff857e7ca923539164af5b3c2fe3e8f8afaf
Patch