CVE-2026-72436

The CVE-2026-72436 affects the Linux kernel netfilter ipset code. It arises from using test_bit() in lockless RCU readers within hash types, which is a relaxed atomic lacking memory barriers. The fix replaces test_bit() with test_bit_acquire() in code paths that may run parallel with add/del/gc, ...

CVE-2026-72436 netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Don't use testbit in lockless RCU readers in hash types Sashiko pointed out that there are a few lockless RCU readers using testbit which is a relaxed atomic operation and provides no memory barrier guarantees...

UBUNTU-CVE-2026-64435

In the Linux kernel, the following vulnerability has been resolved: audit: Fix data races of skbqueuelen readers on auditqueue Multiple readers access auditqueue.qlen via skbqueuelen without holding the queue lock or using READONCE, while kauditd writes to this field via the skbdequeue → skbunlin...