Vulnerability Database

319,194

Total vulnerabilities in the database

CVE-2025-37997

In the Linux kernel, the following vulnerability has been resolved:

netfilter: ipset: fix region locking in hash types

Region locking introduced in v5.6-rc4 contained three macros to handle the region locks: ahash_bucket_start(), ahash_bucket_end() which gave back the start and end hash bucket values belonging to a given region lock and ahash_region() which should give back the region lock belonging to a given hash bucket. The latter was incorrect which can lead to a race condition between the garbage collector and adding new elements when a hash type of set is defined with timeouts.

  • Published: May 29, 2025
  • Updated: Dec 17, 2025
  • CVE: CVE-2025-37997
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.5
  • AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWEs:

Software From Fixed in
linux / linux_kernel 5.4.24 5.4.294
linux / linux_kernel 5.5.8 5.6
linux / linux_kernel 5.6.1 5.10.238
linux / linux_kernel 5.11 5.15.183
linux / linux_kernel 5.16 6.1.139
linux / linux_kernel 6.2 6.6.91
linux / linux_kernel 6.7 6.12.29
linux / linux_kernel 6.13 6.14.7
linux / linux_kernel 5.6 5.6.x
linux / linux_kernel 5.6-rc4 5.6-rc4.x
linux / linux_kernel 5.6-rc5 5.6-rc5.x
linux / linux_kernel 5.6-rc6 5.6-rc6.x
linux / linux_kernel 5.6-rc7 5.6-rc7.x
linux / linux_kernel 6.15-rc1 6.15-rc1.x
linux / linux_kernel 6.15-rc2 6.15-rc2.x
linux / linux_kernel 6.15-rc3 6.15-rc3.x
linux / linux_kernel 6.15-rc4 6.15-rc4.x
linux / linux_kernel 6.15-rc5 6.15-rc5.x
debian / debian_linux 11.0 11.0.x