---
id: CVE-2026-72434
title: 'netfilter: ipset: make sure gc is properly stopped'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  netfilter: ipset: make sure gc is properly stopped

  Sashiko noticed that when destroying a set,
  cancel_delayed_work_sync() was called while gc
  calls queue_delayed_work(…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= f66ee0410b1c3481ee75e5db9b34547b4d582465 <
    c940d1b96248c3081b664ede5418078bdc7c8c07
  - >-
    Linux >= f66ee0410b1c3481ee75e5db9b34547b4d582465 <
    12088da6add5b003657c8506c5b0fcef835083b8
  - >-
    Linux >= f66ee0410b1c3481ee75e5db9b34547b4d582465 <
    c78bd5195a5998094a5866df702fbeafda60dafb
  - >-
    Linux >= f66ee0410b1c3481ee75e5db9b34547b4d582465 <
    4a597a87e2e2f608edb6be2c510dc826b4fdfb53
  - Linux 5dd9488ae41070b69d2f4acb580f77db5705f9ca
  - Linux a469bab3386aebff33c59506f3a95e35b91118fd
  - Linux >= 5.4.24 < 5.5
  - Linux >= 5.5.8 < 5.6
  - Linux 5.6
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-16T18:49:50.650584Z'
published: '2026-08-15'
updated: '2026-10-16'
sourceUpdated: '2026-10-16T18:55:23.726Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-72434'
references:
  - url: 'https://git.kernel.org/stable/c/c940d1b96248c3081b664ede5418078bdc7c8c07'
  - url: 'https://git.kernel.org/stable/c/12088da6add5b003657c8506c5b0fcef835083b8'
  - url: 'https://git.kernel.org/stable/c/c78bd5195a5998094a5866df702fbeafda60dafb'
  - url: 'https://git.kernel.org/stable/c/4a597a87e2e2f608edb6be2c510dc826b4fdfb53'
tags:
  - cve.org
epss: 0.00168
epssPercentile: 0.0569
ingestedAt: '2026-10-16T19:46:24.396Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

netfilter: ipset: make sure gc is properly stopped

Sashiko noticed that when destroying a set,
cancel_delayed_work_sync() was called while gc
calls queue_delayed_work() unconditionally which
can lead not to properly shutting down the gc.

## Affected

- `Linux >= f66ee0410b1c3481ee75e5db9b34547b4d582465 < c940d1b96248c3081b664ede5418078bdc7c8c07`
- `Linux >= f66ee0410b1c3481ee75e5db9b34547b4d582465 < 12088da6add5b003657c8506c5b0fcef835083b8`
- `Linux >= f66ee0410b1c3481ee75e5db9b34547b4d582465 < c78bd5195a5998094a5866df702fbeafda60dafb`
- `Linux >= f66ee0410b1c3481ee75e5db9b34547b4d582465 < 4a597a87e2e2f608edb6be2c510dc826b4fdfb53`
- `Linux 5dd9488ae41070b69d2f4acb580f77db5705f9ca`
- `Linux a469bab3386aebff33c59506f3a95e35b91118fd`
- `Linux >= 5.4.24 < 5.5`
- `Linux >= 5.5.8 < 5.6`
- `Linux 5.6`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.