AZL-96521 CVE-2026-74492 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: do not update comments from kernel-side hash adds mtyperesize copies comment pointers with memcpy, not the comment objects themselves. During the window after an entry has been copied but before the table swap a...

CVE-2026-74492

The CVE-2026-74492 entry concerns the Linux kernel netfilter ipset subsystem. Technical description across official and vendor advisories shows that during resize operations, mtype_resize() copies only comment pointers, while the old table is published for packet-side updates before the replaceme...

CVE-2026-74492 netfilter: ipset: do not update comments from kernel-side hash adds

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: do not update comments from kernel-side hash adds mtyperesize copies comment pointers with memcpy, not the comment objects themselves. During the window after an entry has been copied but before the table swap a...

PT-2026-72944

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: do not update comments from kernel-side hash adds mtype resize copies comment pointers with memcpy, not the comment objects themselves. During the window after an entry has been copied but before the table swap...