CVE-2026-74492

A flaw was found in the Linux kernel's netfilter ipset component. During an ipset hash table resize operation, a race condition can occur where a packet-side add attempts to update a comment. This can lead to a stale pointer being dereferenced, resulting in a kernel crash and a Denial of Service (DoS) for the affected system. A remote attacker could potentially exploit this vulnerability by sending specially crafted network packets.

This vulnerability is rated as Moderate impact because triggering the condition requires a specific, non-default firewall configuration alongside precise timing to hit the race window. Standard Red Hat Enterprise Linux installations do not configure packet-driven set modifications with comment metadata by default. Exploitation requires an incoming packet to match a rule adding to an existing set entry precisely when an internal hash table resize is taking place, making reliable exploitation difficult and primarily resulting in a kernel crash and denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.