7.8

CVE-2026-72435

netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer()

In the Linux kernel, the following vulnerability has been resolved:

netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer()

Sashiko pointed out that kfree_rcu() was called before
rcu_assign_pointer() in handling the comment extension.
Fix the order so that rcu_assign_pointer() called first.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version b57b2d1fa53fe8563bdfc66a33b844463b9af285
Version < c9787d7c24ffd83019f379455e1b97fb4f0f75eb
Status affected
Version b57b2d1fa53fe8563bdfc66a33b844463b9af285
Version < 6e98407cb94e035bba98956adc9096a76d8b2a9f
Status affected
Version b57b2d1fa53fe8563bdfc66a33b844463b9af285
Version < 50b70f56f3baaff46599f59b2d93fa2540120776
Status affected
Version b57b2d1fa53fe8563bdfc66a33b844463b9af285
Version < d01b4b471f0fc5c396af62845e972ccf99cee29a
Status affected
Version b57b2d1fa53fe8563bdfc66a33b844463b9af285
Version < fcb565966534909377a16be5f7b065db2e25c8b5
Status affected
Version b57b2d1fa53fe8563bdfc66a33b844463b9af285
Version < 8087bb360a936a6314d22b567e4b861656943eb6
Status affected
Version b57b2d1fa53fe8563bdfc66a33b844463b9af285
Version < 93a775fd67f3ef34949a9523bfa69403ee74efdd
Status affected
Version b57b2d1fa53fe8563bdfc66a33b844463b9af285
Version < 3ca9982a8882470aa0ac4e8bb9a552b181d1efcd
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 4.2
Status affected
Version 0
Version < 4.2
Status unaffected
Version <= 5.10.*
Version 5.10.261
Status unaffected
Version <= 5.15.*
Version 5.15.212
Status unaffected
Version <= 6.1.*
Version 6.1.178
Status unaffected
Version <= 6.6.*
Version 6.6.145
Status unaffected
Version <= 6.12.*
Version 6.12.97
Status unaffected
Version <= 6.18.*
Version 6.18.40
Status unaffected
Version <= 7.1.*
Version 7.1.5
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.16% 0.061
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/c9787d7c24ffd83019f379455e1b97fb4f0f75eb
https://git.kernel.org/stable/c/6e98407cb94e035bba98956adc9096a76d8b2a9f
https://git.kernel.org/stable/c/50b70f56f3baaff46599f59b2d93fa2540120776
https://git.kernel.org/stable/c/d01b4b471f0fc5c396af62845e972ccf99cee29a
https://git.kernel.org/stable/c/fcb565966534909377a16be5f7b065db2e25c8b5
https://git.kernel.org/stable/c/8087bb360a936a6314d22b567e4b861656943eb6
https://git.kernel.org/stable/c/93a775fd67f3ef34949a9523bfa69403ee74efdd
https://git.kernel.org/stable/c/3ca9982a8882470aa0ac4e8bb9a552b181d1efcd