CVE-2025-37997netfilter: ipset: fix region locking in hash types
- 7.8HighCVSS base score
- 0.18%Exploitation in 30 daysEPSS · top 92% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix region locking in hash types Region locking introduced in v5.6-rc4 contained three macros to handle the region locks: ahash_bucket_start(), ahash_bucket_end() which gave back the start and end hash bucket values belonging to a given region lock and ahash_region() which should give back the region lock belonging to a given hash bucket. The latter was incorrect which can lead to a race condition between the garbage collector and adding new elements when a hash type of set is defined with timeouts.
Timeline
ID reserved
By Linux
- 43 days later
· 43 days later
Published
- 17 months later
· 17 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| LinuxCNA (assigner) | 3.1 | High7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| NVDNVD · Modified | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.18% · top 92% of all CVEs (15 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: total
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.
Affected products
- affected 5dd9488ae41070b69d2f4acb580f77db5705f9ca – < 00cfc5fad1491796942a948808afb968a0a3f35b
- affected f66ee0410b1c3481ee75e5db9b34547b4d582465 – < 226ce0ec38316d9e3739e73a64b6b8304646c658
- affected f66ee0410b1c3481ee75e5db9b34547b4d582465 – < 82c1eb32693bc48251d92532975e19160987e5b9
- affected f66ee0410b1c3481ee75e5db9b34547b4d582465 – < aa77294b0f73bb8265987591460cd25b8722c3df
- affected f66ee0410b1c3481ee75e5db9b34547b4d582465 – < a3dfec485401943e315c394c29afe2db8f9481d6
- affected f66ee0410b1c3481ee75e5db9b34547b4d582465 – < e2ab67672b2288521a6146034a971f9a82ffc5c5
- affected f66ee0410b1c3481ee75e5db9b34547b4d582465 – < 6e002ecc1c8cfdfc866b9104ab7888da54613e59
- affected f66ee0410b1c3481ee75e5db9b34547b4d582465 – < 8478a729c0462273188263136880480729e9efca
- affected a469bab3386aebff33c59506f3a95e35b91118fd
- affected 5.4.24 – < 5.4.294
- affected 5.5.8 – < 5.6
- affected 5.6
- unaffected < 5.6
- unaffected 5.4.294 – ≤ 5.4.*
- unaffected 5.10.238 – ≤ 5.10.*
- unaffected 5.15.183 – ≤ 5.15.*
- unaffected 6.1.139 – ≤ 6.1.*
- unaffected 6.6.91 – ≤ 6.6.*
- unaffected 6.12.29 – ≤ 6.12.*
- unaffected 6.14.7 – ≤ 6.14.*
- unaffected 6.15 – ≤ *
References
References10
- https://git.kernel.org/stable/c/00cfc5fad1491796942a948808afb968a0a3f35b (opens in a new tab)
- https://git.kernel.org/stable/c/226ce0ec38316d9e3739e73a64b6b8304646c658 (opens in a new tab)
- https://git.kernel.org/stable/c/82c1eb32693bc48251d92532975e19160987e5b9 (opens in a new tab)
- https://git.kernel.org/stable/c/aa77294b0f73bb8265987591460cd25b8722c3df (opens in a new tab)
- https://git.kernel.org/stable/c/a3dfec485401943e315c394c29afe2db8f9481d6 (opens in a new tab)
- https://git.kernel.org/stable/c/e2ab67672b2288521a6146034a971f9a82ffc5c5 (opens in a new tab)
- https://git.kernel.org/stable/c/6e002ecc1c8cfdfc866b9104ab7888da54613e59 (opens in a new tab)
- https://git.kernel.org/stable/c/8478a729c0462273188263136880480729e9efca (opens in a new tab)
- https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html (opens in a new tab)
- https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2025-16383 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2025-37997)Record last updated .