---
id: CVE-2026-72434
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  netfilter: ipset: make sure gc is properly stopped

  Sashiko noticed that when destroying a set,
  cancel_delayed_work_sync() was called while gc
  calls queue_delayed_work(…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  netfilter: ipset: make sure gc is properly stopped

  Sashiko noticed that when destroying a set,
  cancel_delayed_work_sync() was called while gc
  calls queue_delayed_work(…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= f66ee0410b1c3481ee75e5db9b34547b4d582465 <
    c940d1b96248c3081b664ede5418078bdc7c8c07
  - >-
    Linux >= f66ee0410b1c3481ee75e5db9b34547b4d582465 <
    12088da6add5b003657c8506c5b0fcef835083b8
  - >-
    Linux >= f66ee0410b1c3481ee75e5db9b34547b4d582465 <
    c78bd5195a5998094a5866df702fbeafda60dafb
  - >-
    Linux >= f66ee0410b1c3481ee75e5db9b34547b4d582465 <
    4a597a87e2e2f608edb6be2c510dc826b4fdfb53
  - Linux 5dd9488ae41070b69d2f4acb580f77db5705f9ca
  - Linux a469bab3386aebff33c59506f3a95e35b91118fd
  - Linux >= 5.4.24 < 5.5
  - Linux >= 5.5.8 < 5.6
  - Linux 5.6
published: '2026-08-15'
updated: '2026-10-16'
sourceUpdated: '2026-10-16T19:17:30.207'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-72434'
references:
  - url: 'https://git.kernel.org/stable/c/12088da6add5b003657c8506c5b0fcef835083b8'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/4a597a87e2e2f608edb6be2c510dc826b4fdfb53'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/c78bd5195a5998094a5866df702fbeafda60dafb'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/c940d1b96248c3081b664ede5418078bdc7c8c07'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
epss: 0.00168
epssPercentile: 0.06062
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-16T18:49:50.650584Z'
ingestedAt: '2026-10-16T19:46:24.396Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

netfilter: ipset: make sure gc is properly stopped

Sashiko noticed that when destroying a set,
cancel_delayed_work_sync() was called while gc
calls queue_delayed_work() unconditionally which
can lead not to properly shutting down the gc.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.