CVE-2026-72436
Critical
Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types Sashiko pointed out that there are a few lockless RCU readers using test_bit() which is a relaxed atomic operation and provides no memory barrier guarantees. Use test_bit_acquire() instead where the operation may run parallel with add/del/gc, i.e. is not one from the next cases - protected by region lock - in a set destroy phase - in a new/temporary set creation phase
SeverityCritical
CVSS9.8
Exploit probability—
Product
Linux
PublishedAug 15, 2026
First seenAug 15, 2026
How to fix
Update
- Linux Linuxc107233d2ff4fd7cef5d02f9124b99194957a710, 6329d3a9afe715fddda0460cfa46b496d61c2fe0, 7445fe965b7d8756070a40e80f8b73348ccda1d7, c4d257734e91bfcdc71d41843392dd6400b5bb1b, 3219d74e4536658c937fd878a327257b86ce80dd, e4b4984e28c16406ecb318444dea4a8bf47def3e or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 18f84d41d34fa35d0d64bbaea01fe664553ecc06 ≤ v < c107233d2ff4fd7cef5d02f9124b99194957a710, 18f84d41d34fa35d0d64bbaea01fe664553ecc06 ≤ v < 6329d3a9afe715fddda0460cfa46b496d61c2fe0, 18f84d41d34fa35d0d64bbaea01fe664553ecc06 ≤ v < 7445fe965b7d8756070a40e80f8b73348ccda1d7, 18f84d41d34fa35d0d64bbaea01fe664553ecc06 ≤ v < c4d257734e91bfcdc71d41843392dd6400b5bb1b, 18f84d41d34fa35d0d64bbaea01fe664553ecc06 ≤ v < 3219d74e4536658c937fd878a327257b86ce80dd, 18f84d41d34fa35d0d64bbaea01fe664553ecc06 ≤ v < e4b4984e28c16406ecb318444dea4a8bf47def3e, 4.2 | c107233d2ff4fd7cef5d02f9124b99194957a710, 6329d3a9afe715fddda0460cfa46b496d61c2fe0, 7445fe965b7d8756070a40e80f8b73348ccda1d7, c4d257734e91bfcdc71d41843392dd6400b5bb1b, 3219d74e4536658c937fd878a327257b86ce80dd, e4b4984e28c16406ecb318444dea4a8bf47def3e |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.