Skip to content
Heist/ feed
High

netfilter: ipset: fix region locking in hash types

Type: advisorySource: Official CVE List1 source record

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix region locking in hash types Region locking introduced in v5.6-rc4 contained three macros to handle the region locks: ahash_bucket_start(), ahash_bucket_end() which gave back the start and end hash bucket values belonging to a given region lock and ahash_region() which should give back the region lock belonging to a given hash bucket. The latter was incorrect which can lead to a race condition between the garbage collector and adding new elements when a hash type of set is defined with timeouts.

Announced Source revision 1
Original source ↗

CVE-2025-37997

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2025-37997

Linux

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Linux

Source reference: /containers/cna/affected/1/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "5dd9488ae41070b69d2f4acb580f77db5705f9ca",
        "lessThan": "00cfc5fad1491796942a948808afb968a0a3f35b",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "f66ee0410b1c3481ee75e5db9b34547b4d582465",
        "lessThan": "226ce0ec38316d9e3739e73a64b6b8304646c658",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "f66ee0410b1c3481ee75e5db9b34547b4d582465",
        "lessThan": "82c1eb32693bc48251d92532975e19160987e5b9",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "f66ee0410b1c3481ee75e5db9b34547b4d582465",
        "lessThan": "aa77294b0f73bb8265987591460cd25b8722c3df",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "f66ee0410b1c3481ee75e5db9b34547b4d582465",
        "lessThan": "a3dfec485401943e315c394c29afe2db8f9481d6",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "f66ee0410b1c3481ee75e5db9b34547b4d582465",
        "lessThan": "e2ab67672b2288521a6146034a971f9a82ffc5c5",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "f66ee0410b1c3481ee75e5db9b34547b4d582465",
        "lessThan": "6e002ecc1c8cfdfc866b9104ab7888da54613e59",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "f66ee0410b1c3481ee75e5db9b34547b4d582465",
        "lessThan": "8478a729c0462273188263136880480729e9efca",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "a469bab3386aebff33c59506f3a95e35b91118fd",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "5.4.24",
        "lessThan": "5.4.294",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "5.5.8",
        "lessThan": "5.6",
        "versionType": "semver"
      }
    ],
    "programFiles": [
      "net/netfilter/ipset/ip_set_hash_gen.h"
    ],
    "defaultStatus": "unaffected"
  },
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "5.6"
      },
      {
        "status": "unaffected",
        "version": "0",
        "lessThan": "5.6",
        "versionType": "semver"
      },
      {
        "status": "unaffected",
        "version": "5.4.294",
        "versionType": "semver",
        "lessThanOrEqual": "5.4.*"
      },
      {
        "status": "unaffected",
        "version": "5.10.238",
        "versionType": "semver",
        "lessThanOrEqual": "5.10.*"
      },
      {
        "status": "unaffected",
        "version": "5.15.183",
        "versionType": "semver",
        "lessThanOrEqual": "5.15.*"
      },
      {
        "status": "unaffected",
        "version": "6.1.139",
        "versionType": "semver",
        "lessThanOrEqual": "6.1.*"
      },
      {
        "status": "unaffected",
        "version": "6.6.91",
        "versionType": "semver",
        "lessThanOrEqual": "6.6.*"
      },
      {
        "status": "unaffected",
        "version": "6.12.29",
        "versionType": "semver",
        "lessThanOrEqual": "6.12.*"
      },
      {
        "status": "unaffected",
        "version": "6.14.7",
        "versionType": "semver",
        "lessThanOrEqual": "6.14.*"
      },
      {
        "status": "unaffected",
        "version": "6.15",
        "versionType": "original_commit_for_fix",
        "lessThanOrEqual": "*"
      }
    ],
    "programFiles": [
      "net/netfilter/ipset/ip_set_hash_gen.h"
    ],
    "defaultStatus": "affected"
  }
]
Related CVEs
CVE-2025-37997

Source reference: /cveMetadata/cveId

Publisher severity

high

Source reference: /containers/cna/metrics

Event
#30504 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement