{"id":"CVE-2026-72435","revision":"7b1a812325ac4f52a43710f5c96f4ec2","records":[{"revision":"7b1a812325ac4f52a43710f5c96f4ec2","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-72435","aliases":[],"title":"netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer()","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer()\n\nSashiko pointed out that kfree_rcu() was called before\nrcu_assign_pointer() in handling the comment extension.\nFix the order so that rcu_assign_pointer() called first.","state":0,"publishedAt":"2026-08-15T05:56:49.402+00:00","modifiedAt":"2026-10-16T18:55:23.893+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"net/netfilter/ipset/ip_set_core.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"b57b2d1fa53fe8563bdfc66a33b844463b9af285\",\n                            \"lessThan\": \"c9787d7c24ffd83019f379455e1b97fb4f0f75eb\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"b57b2d1fa53fe8563bdfc66a33b844463b9af285\",\n                            \"lessThan\": \"6e98407cb94e035bba98956adc9096a76d8b2a9f\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"b57b2d1fa53fe8563bdfc66a33b844463b9af285\",\n                            \"lessThan\": \"50b70f56f3baaff46599f59b2d93fa2540120776\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"b57b2d1fa53fe8563bdfc66a33b844463b9af285\",\n                            \"lessThan\": \"d01b4b471f0fc5c396af62845e972ccf99cee29a\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"b57b2d1fa53fe8563bdfc66a33b844463b9af285\",\n                            \"lessThan\": \"fcb565966534909377a16be5f7b065db2e25c8b5\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"b57b2d1fa53fe8563bdfc66a33b844463b9af285\",\n                            \"lessThan\": \"8087bb360a936a6314d22b567e4b861656943eb6\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"b57b2d1fa53fe8563bdfc66a33b844463b9af285\",\n                            \"lessThan\": \"93a775fd67f3ef34949a9523bfa69403ee74efdd\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"b57b2d1fa53fe8563bdfc66a33b844463b9af285\",\n                            \"lessThan\": \"3ca9982a8882470aa0ac4e8bb9a552b181d1efcd\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"net/netfilter/ipset/ip_set_core.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"4.2\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"4.2\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.261\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.212\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.178\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.145\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.97\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.40\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.1.5\",\n                            \"lessThanOrEqual\": \"7.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":7.8,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/c9787d7c24ffd83019f379455e1b97fb4f0f75eb","https://git.kernel.org/stable/c/6e98407cb94e035bba98956adc9096a76d8b2a9f","https://git.kernel.org/stable/c/50b70f56f3baaff46599f59b2d93fa2540120776","https://git.kernel.org/stable/c/d01b4b471f0fc5c396af62845e972ccf99cee29a","https://git.kernel.org/stable/c/fcb565966534909377a16be5f7b065db2e25c8b5","https://git.kernel.org/stable/c/8087bb360a936a6314d22b567e4b861656943eb6","https://git.kernel.org/stable/c/93a775fd67f3ef34949a9523bfa69403ee74efdd","https://git.kernel.org/stable/c/3ca9982a8882470aa0ac4e8bb9a552b181d1efcd"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-72435","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-72435","identifiers":["CVE-2026-72435"]},"retained":false,"historicalAffected":[]}],"coverage":[]}