mirror of
https://github.com/0xMarcio/cve.git
synced 2025-11-30 18:56:19 +00:00
1.5 KiB
1.5 KiB
CVE-2025-37997
Description
In the Linux kernel, the following vulnerability has been resolved:netfilter: ipset: fix region locking in hash typesRegion locking introduced in v5.6-rc4 contained three macros to handlethe region locks: ahash_bucket_start(), ahash_bucket_end() which gaveback the start and end hash bucket values belonging to a given regionlock and ahash_region() which should give back the region lock belongingto a given hash bucket. The latter was incorrect which can lead to arace condition between the garbage collector and adding new elementswhen a hash type of set is defined with timeouts.
POC
Reference
No PoCs from references.