Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: mark the rcu locked areas properly When we bump the uref counter, there's no need to keep the rcu lock because the referred hash table can't disappear. Also, from the same reason in mtype_gc we need the rcu lock and not a spinlock.
References7
- git.kernel.org/stable/c/0c46c9ce24130657ec7460c27fba5d445f5abd06
- git.kernel.org/stable/c/5d0c22e73656d050daffad10a2ba8765ce8441c8
- git.kernel.org/stable/c/67bd3d2350d17c2f4fb158c3f917c10b15ecbc94
- git.kernel.org/stable/c/892399abd1a005a455d5b74d86d82b9773405f2b
- git.kernel.org/stable/c/ca9fab1ca15534cef1630e81a479e94b3bbcdb6a
- git.kernel.org/stable/c/ecb48c6b9edc78de8dd456c365727ae14b88c1ee
- git.kernel.org/stable/c/eee5172741b2c0e73210020732043e5d589295d3
Metrics
- CVSS 3.1
-
7.8
HIGH
Score source: CNA
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS — exploit probability
- 0% percentile: 6 · as of 8 November 2026
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.