CVE-2026-72434

Summary

In the Linux kernel, the following vulnerability has been resolved:

netfilter: ipset: make sure gc is properly stopped

Sashiko noticed that when destroying a set, cancel_delayed_work_sync() was called while gc calls queue_delayed_work() unconditionally which can lead not to properly shutting down the gc.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxf66ee0410b1c3481ee75e5db9b34547b4d582465 < c940d1b96248c3081b664ede5418078bdc7c8c07affected
LinuxLinuxf66ee0410b1c3481ee75e5db9b34547b4d582465 < 12088da6add5b003657c8506c5b0fcef835083b8affected
LinuxLinuxf66ee0410b1c3481ee75e5db9b34547b4d582465 < c78bd5195a5998094a5866df702fbeafda60dafbaffected
LinuxLinuxf66ee0410b1c3481ee75e5db9b34547b4d582465 < 4a597a87e2e2f608edb6be2c510dc826b4fdfb53affected
LinuxLinux5dd9488ae41070b69d2f4acb580f77db5705f9caaffected
LinuxLinuxa469bab3386aebff33c59506f3a95e35b91118fdaffected
LinuxLinux5.4.24 < 5.5affected
LinuxLinux5.5.8 < 5.6affected
LinuxLinux5.6affected
LinuxLinux0 < 5.6unaffected
LinuxLinux6.12.97 <= 6.12.*unaffected
LinuxLinux6.18.40 <= 6.18.*unaffected
LinuxLinux7.1.5 <= 7.1.*unaffected
LinuxLinux7.2 <= *unaffected

Weaknesses

References