Riskcovery

CVE-2026-72434

netfilter: ipset: make sure gc is properly stopped

State
Published
Severity
7.8 High
Published
Aug 15, 2026
Updated
Oct 16, 2026
Reserved
Aug 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: ipset: make sure gc is properly stopped

Sashiko noticed that when destroying a set, cancel_delayed_work_sync() was called while gc calls queue_delayed_work() unconditionally which can lead not to properly shutting down the gc.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • f66ee0410b1c3481ee75e5db9b34547b4d582465 to before c940d1b96248c3081b664ede5418078bdc7c8c07Affected
  • f66ee0410b1c3481ee75e5db9b34547b4d582465 to before 12088da6add5b003657c8506c5b0fcef835083b8Affected
  • f66ee0410b1c3481ee75e5db9b34547b4d582465 to before c78bd5195a5998094a5866df702fbeafda60dafbAffected
  • f66ee0410b1c3481ee75e5db9b34547b4d582465 to before 4a597a87e2e2f608edb6be2c510dc826b4fdfb53Affected
  • 5dd9488ae41070b69d2f4acb580f77db5705f9caAffected
  • a469bab3386aebff33c59506f3a95e35b91118fdAffected
  • 5.4.24 to before 5.5Affected
  • 5.5.8 to before 5.6Affected
LinuxLinux
  • 5.6Affected
  • before 5.6Not affected
  • 6.12.97 through 6.12.*Not affected
  • 6.18.40 through 6.18.*Not affected
  • 7.1.5 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.