Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-52921

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: stop hash:* range iteration at end The following hash set variants: hash:ip,mark hash:ip,port hash:ip,port,ip hash:ip,port,net iterate IPv4 ranges with a 32-bit iterator. The iterator must stop once the last address in the requested range has been processed. Advancing it once more can move the traversal state past the end of the request, so a later retry may continue from an unintended position. Handle th
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:3517b64173843f4dc6bd2af61d891f3f1e400538bbdc111878199d3caba7f2f0
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/netfilter/ipset/ip_set_hash_ipmark.c","net/netfilter/ipset/ip_set_hash_ipport.c","net/netfilter/ipset/ip_set_hash_ipportip.c","net/netfilter/ipset/ip_set_hash_ipportnet.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"be75218fadea22e59c8673db212f29c681bf45bb","status":"affected","version":"48596a8ddc46f96afb6a2cd72787cb15d6bb01fc","versionType":"git"},{"lessThan":"383418c20e69f5761b6ec5238f599423f4fb77fb","status":"affected","version":"48596a8ddc46f96afb6a…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9158aeba2418527e042ad1d2c249d738a9f200558d27ce02e51dfe9a7aa1d19d · sha256:64972a89b3b56ed4… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["net/netfilter/ipset/ip_set_hash_ipmark.c","net/netfilter/ipset/ip_set_hash_ipport.c","net/netfilter/ipset/ip_set_hash_ipportip.c","net/netfilter/ipset/ip_set_hash_ipportnet.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.14"},{"lessThan":"4.14","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffe…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9158aeba2418527e042ad1d2c249d738a9f200558d27ce02e51dfe9a7aa1d19d · sha256:64972a89b3b56ed4… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/netfilter/ipset/ip_set_hash_ipmark.c","net/netfilter/ipset/ip_set_hash_ipport.c","net/netfilter/ipset/ip_set_hash_ipportip.c","net/netfilter/ipset/ip_set_hash_ipportnet.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"be75218fadea22e59c8673db212f29c681bf45bb","status":"affected","version":"48596a8ddc46f96afb6a2cd72787cb15d6bb01fc","versionType":"git"},{"lessThan":"383418c20e69f5761b6ec5238f599423f4fb77fb","status":"affected","version":"48596a8ddc46f96afb6a…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9158aeba2418527e042ad1d2c249d738a9f200558d27ce02e51dfe9a7aa1d19d · sha256:64972a89b3b56ed4… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["net/netfilter/ipset/ip_set_hash_ipmark.c","net/netfilter/ipset/ip_set_hash_ipport.c","net/netfilter/ipset/ip_set_hash_ipportip.c","net/netfilter/ipset/ip_set_hash_ipportnet.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.14"},{"lessThan":"4.14","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffe…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9158aeba2418527e042ad1d2c249d738a9f200558d27ce02e51dfe9a7aa1d19d · sha256:64972a89b3b56ed4… · /containers/cna/affected/1

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/02f75f041a93ea045834da89cd3234f4c1d749b4"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9158aeba2418527e042ad1d2c249d738a9f200558d27ce02e51dfe9a7aa1d19d · sha256:64972a89b3b56ed4… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/0b530efb2cc9dbdddfd49d392e3a857f0d4ce8dc"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9158aeba2418527e042ad1d2c249d738a9f200558d27ce02e51dfe9a7aa1d19d · sha256:64972a89b3b56ed4… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/0d3a282ab5f165fc207ff49ea5b6ad8f54616bd6"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9158aeba2418527e042ad1d2c249d738a9f200558d27ce02e51dfe9a7aa1d19d · sha256:64972a89b3b56ed4… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/0d7b33ace701fe397e6e4de145f32e098178d901"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9158aeba2418527e042ad1d2c249d738a9f200558d27ce02e51dfe9a7aa1d19d · sha256:64972a89b3b56ed4… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/383418c20e69f5761b6ec5238f599423f4fb77fb"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9158aeba2418527e042ad1d2c249d738a9f200558d27ce02e51dfe9a7aa1d19d · sha256:64972a89b3b56ed4… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/952e988163c2ab9939c3db9f0f8e77af6a1bb436"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9158aeba2418527e042ad1d2c249d738a9f200558d27ce02e51dfe9a7aa1d19d · sha256:64972a89b3b56ed4… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/be75218fadea22e59c8673db212f29c681bf45bb"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9158aeba2418527e042ad1d2c249d738a9f200558d27ce02e51dfe9a7aa1d19d · sha256:64972a89b3b56ed4… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/c281e018af98df91827d65bec00f4956c00a1b02"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9158aeba2418527e042ad1d2c249d738a9f200558d27ce02e51dfe9a7aa1d19d · sha256:64972a89b3b56ed4… · /containers/cna/references/3

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer