CVE-2026-74492

In CVE-2026-74492, the Linux kernel netfilter ipset path is affected. The vulnerability stems from mtype_resize() copying only comment pointers via memcpy(), while the actual comment objects remain; during the window between copying an entry and swapping the table, the old table is still used for...

CVE-2026-74492 netfilter: ipset: do not update comments from kernel-side hash adds

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: do not update comments from kernel-side hash adds mtyperesize copies comment pointers with memcpy, not the comment objects themselves. During the window after an entry has been copied but before the table swap a...

PT-2026-72944

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: do not update comments from kernel-side hash adds mtype resize copies comment pointers with memcpy, not the comment objects themselves. During the window after an entry has been copied but before the table swap...