Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-64189

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix race between dump and ip_set_list resize The release path of ip_set_dump_do() and ip_set_dump_done() read inst->ip_set_list via ip_set_ref_netlink(), a plain rcu_dereference_raw() of the array pointer. These run from netlink_recvmsg() without the nfnl mutex and without an RCU read-side critical section. A concurrent ip_set_create() can grow the array: it publishes the new array, calls synchronize_net() a
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:9ce999705d147d79c3eacf2b7262574b4c9ca6652e31fc1bf28d35242e222753
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["net/netfilter/ipset/ip_set_core.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.20"},{"lessThan":"4.20","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.261","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.212","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.178","versionType":"semver…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:df3cc1ac1bde4128358ccf2d7f7f95b25d59b2d28a7ee89cece19960e6c1eb7f · sha256:f3d850e930fca948… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/netfilter/ipset/ip_set_core.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"a7a299277959683204d73333c32c092fd69327d4","status":"affected","version":"8a02bdd50b2ecb6d62121d2958d3ea186cc88ce7","versionType":"git"},{"lessThan":"1bc67c3fc98e9fc07032cc56afcdbc690c47d11e","status":"affected","version":"8a02bdd50b2ecb6d62121d2958d3ea186cc88ce7","versionType":"git"},{"lessThan":"e8a9976b61f1bc4aa7fd25fa26726dfdf2adf710","status":"affected","version":"8a02bdd50b2e…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:df3cc1ac1bde4128358ccf2d7f7f95b25d59b2d28a7ee89cece19960e6c1eb7f · sha256:f3d850e930fca948… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["net/netfilter/ipset/ip_set_core.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.20"},{"lessThan":"4.20","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.261","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.212","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.178","versionType":"semver…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:df3cc1ac1bde4128358ccf2d7f7f95b25d59b2d28a7ee89cece19960e6c1eb7f · sha256:f3d850e930fca948… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/netfilter/ipset/ip_set_core.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"a7a299277959683204d73333c32c092fd69327d4","status":"affected","version":"8a02bdd50b2ecb6d62121d2958d3ea186cc88ce7","versionType":"git"},{"lessThan":"1bc67c3fc98e9fc07032cc56afcdbc690c47d11e","status":"affected","version":"8a02bdd50b2ecb6d62121d2958d3ea186cc88ce7","versionType":"git"},{"lessThan":"e8a9976b61f1bc4aa7fd25fa26726dfdf2adf710","status":"affected","version":"8a02bdd50b2e…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:df3cc1ac1bde4128358ccf2d7f7f95b25d59b2d28a7ee89cece19960e6c1eb7f · sha256:f3d850e930fca948… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion
{"metric":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:df3cc1ac1bde4128358ccf2d7f7f95b25d59b2d28a7ee89cece19960e6c1eb7f · sha256:f3d850e930fca948… · /containers/cna/metrics/0/cvssV3_1

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/1bc67c3fc98e9fc07032cc56afcdbc690c47d11e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:df3cc1ac1bde4128358ccf2d7f7f95b25d59b2d28a7ee89cece19960e6c1eb7f · sha256:f3d850e930fca948… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/7cd9103283b26b917360ec99d7d2f2d761bcf1ab"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:df3cc1ac1bde4128358ccf2d7f7f95b25d59b2d28a7ee89cece19960e6c1eb7f · sha256:f3d850e930fca948… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/81d54c766337b923eec26da0a13406760b091093"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:df3cc1ac1bde4128358ccf2d7f7f95b25d59b2d28a7ee89cece19960e6c1eb7f · sha256:f3d850e930fca948… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/96fbafc20ebd9a613736c2998b89c539fe3042f5"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:df3cc1ac1bde4128358ccf2d7f7f95b25d59b2d28a7ee89cece19960e6c1eb7f · sha256:f3d850e930fca948… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/a7a299277959683204d73333c32c092fd69327d4"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:df3cc1ac1bde4128358ccf2d7f7f95b25d59b2d28a7ee89cece19960e6c1eb7f · sha256:f3d850e930fca948… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/e8a9976b61f1bc4aa7fd25fa26726dfdf2adf710"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:df3cc1ac1bde4128358ccf2d7f7f95b25d59b2d28a7ee89cece19960e6c1eb7f · sha256:f3d850e930fca948… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/e8ee198bbc04a32d336e79160fde980e0235b39f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:df3cc1ac1bde4128358ccf2d7f7f95b25d59b2d28a7ee89cece19960e6c1eb7f · sha256:f3d850e930fca948… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/ff86ea9b7fdf70564e60436fbee68c96bc459943"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:df3cc1ac1bde4128358ccf2d7f7f95b25d59b2d28a7ee89cece19960e6c1eb7f · sha256:f3d850e930fca948… · /containers/cna/references/4

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer