CVE-2026-52921

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the netfilter ipset component where specific hash set variants—hash:ip,mark, hash:ip,port, hash:ip,port,ip, and hash:ip,port,net—iterate IPv4 ranges using a 32-bit iterator. The iterator fails to stop immediately after processing the last address in the requested range. Advancing the iterator one additional time can move the traversal state beyond the end of the request, potentially causing subsequent retries to resume from an incorrect position.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.