{"id":"CVE-2026-72434","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ipset: make sure gc is properly stopped\n\nSashiko noticed that when destroying a set,\ncancel_delayed_work_sync() was called while gc\ncalls queue_delayed_work(…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ipset: make sure gc is properly stopped\n\nSashiko noticed that when destroying a set,\ncancel_delayed_work_sync() was called while gc\ncalls queue_delayed_work(…","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","vendor":"Linux","product":"Linux","affected":["Linux >= f66ee0410b1c3481ee75e5db9b34547b4d582465 < c940d1b96248c3081b664ede5418078bdc7c8c07","Linux >= f66ee0410b1c3481ee75e5db9b34547b4d582465 < 12088da6add5b003657c8506c5b0fcef835083b8","Linux >= f66ee0410b1c3481ee75e5db9b34547b4d582465 < c78bd5195a5998094a5866df702fbeafda60dafb","Linux >= f66ee0410b1c3481ee75e5db9b34547b4d582465 < 4a597a87e2e2f608edb6be2c510dc826b4fdfb53","Linux 5dd9488ae41070b69d2f4acb580f77db5705f9ca","Linux a469bab3386aebff33c59506f3a95e35b91118fd","Linux >= 5.4.24 < 5.5","Linux >= 5.5.8 < 5.6","Linux 5.6"],"published":"2026-08-15","updated":"2026-10-16","sourceUpdated":"2026-10-16T19:17:30.207","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-72434","references":[{"url":"https://git.kernel.org/stable/c/12088da6add5b003657c8506c5b0fcef835083b8","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/4a597a87e2e2f608edb6be2c510dc826b4fdfb53","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/c78bd5195a5998094a5866df702fbeafda60dafb","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/c940d1b96248c3081b664ede5418078bdc7c8c07","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"tags":["nvd","cve.org"],"epss":0.00168,"epssPercentile":0.06062,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-10-16T18:49:50.650584Z"},"ingestedAt":"2026-10-16T19:46:24.396Z","slug":"CVE-2026-72434","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ipset: make sure gc is properly stopped\n\nSashiko noticed that when destroying a set,\ncancel_delayed_work_sync() was called while gc\ncalls queue_delayed_work() unconditionally which\ncan lead not to properly shutting down the gc.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}