High · published May 29, 2025
In the Linux kernel, the following vulnerability has been resolved:
netfilter: ipset: fix region locking in hash types
Region locking introduced in v5.6-rc4 contained three macros to handle
the region locks: ahash_bucket_start(), ahash_bucket_end() which gave
back the start and end hash bucket values belonging to a given region
lock and ahash_region() which should give back the region lock belonging
to a given hash bucket. The latter was incorrect which can lead to a
race condition between the garbage collector and adding new elements
when a hash type of set is defined with timeouts.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | ≥ 5.4.24, < 5.4.294 | 5.4.294 |
| linux/linux_kernel | ≥ 5.5.8, < 5.6 | 5.6 |
| linux/linux_kernel | ≥ 5.6.1, < 5.10.238 | 5.10.238 |
| linux/linux_kernel | ≥ 5.11, < 5.15.183 | 5.15.183 |
| linux/linux_kernel | ≥ 5.16, < 6.1.139 | 6.1.139 |
| linux/linux_kernel | ≥ 6.2, < 6.6.91 | 6.6.91 |
| linux/linux_kernel | ≥ 6.7, < 6.12.29 | 6.12.29 |
| linux/linux_kernel | ≥ 6.13, < 6.14.7 | 6.14.7 |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| debian/debian_linux | all versions | — |