Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2026-72435 Details

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() Sashiko pointed out that kfree_rcu() was called before rcu_assign_pointer() in handling the comment extension. Fix the order so that rcu_assign_pointer() called first.

Metrics

CVSS 3.x Severity and Vector Strings:

CNA: kernel.orgCVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/3ca9982a8882470aa0ac4e8bb9a552b181d1efcd kernel.org
https://git.kernel.org/stable/c/50b70f56f3baaff46599f59b2d93fa2540120776 kernel.org
https://git.kernel.org/stable/c/6e98407cb94e035bba98956adc9096a76d8b2a9f kernel.org
https://git.kernel.org/stable/c/8087bb360a936a6314d22b567e4b861656943eb6 kernel.org
https://git.kernel.org/stable/c/93a775fd67f3ef34949a9523bfa69403ee74efdd kernel.org

see all 8 references

Weakness Enumeration

No weakness enumeration is available for this CVE.

Affected Products

No affected product data is available for this CVE.

Change History

2 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2026-72435
NVD Published Date:
Aug 15, 2026
NVD Last Modified:
Aug 17, 2026
Source:
kernel.org
CVE-2026-72435 Details - Not Deferred