CVE-2026-72435

A flaw was found in the Linux kernel's netfilter ipset component. An incorrect order of memory management operations, specifically calling kfree_rcu() before rcu_assign_pointer() when handling the comment extension, could lead to a memory corruption vulnerability. This could potentially allow an attacker to cause system instability or escalate privileges.

This vulnerability is rated as having a Moderate impact for Red Hat Enterprise Linux because exploitation requires local administrative privileges, specifically network administration capabilities, to manipulate ipset configurations. Triggering this race condition during comment extension handling is restricted to local environments, presenting a risk of kernel memory corruption or system crash rather than arbitrary remote compromise. Standard deployments that restrict unprivileged access to network configuration capabilities significantly limit exposure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.