> CVE-2026-72435

> DESCRIPTION

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() Sashiko pointed out that kfree_rcu() was called before rcu_assign_pointer() in handling the comment extension. Fix the order so that rcu_assign_pointer() called first.

> AFFECTED_PRODUCTS

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer()

> HISTORIQUE DES MODIFICATIONS

> REFERENCES