CVE-2026-72436

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description In the netfilter ipset component, lockless RCU (Read-Copy-Update) readers in hash types incorrectly use the test bit() function. Because test bit() is a relaxed atomic operation, it does not provide memory barrier guarantees, which can lead to issues when operations run in parallel with addition, deletion, or garbage collection. To resolve this, test bit acquire() should be used instead, except in cases where the operation is protected by a region lock, occurs during a set destroy phase, or happens during a new or temporary set creation phase.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.