U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Vulnerability Change Records for CVE-2025-37997

Change History

New CVE Received from kernel.org 5/29/2025 10:15:36 AM

Action Type Old Value New Value
Added Description

								
							
							
						
In the Linux kernel, the following vulnerability has been resolved:

netfilter: ipset: fix region locking in hash types

Region locking introduced in v5.6-rc4 contained three macros to handle
the region locks: ahash_bucket_start(), ahash_bucket_end() which gave
back the start and end hash bucket values belonging to a given region
lock and ahash_region() which should give back the region lock belonging
to a given hash bucket. The latter was incorrect which can lead to a
race condition between the garbage collector and adding new elements
when a hash type of set is defined with timeouts.
Added Reference

								
							
							
						
https://git.kernel.org/stable/c/6e002ecc1c8cfdfc866b9104ab7888da54613e59
Added Reference

								
							
							
						
https://git.kernel.org/stable/c/82c1eb32693bc48251d92532975e19160987e5b9
Added Reference

								
							
							
						
https://git.kernel.org/stable/c/8478a729c0462273188263136880480729e9efca
Added Reference

								
							
							
						
https://git.kernel.org/stable/c/a3dfec485401943e315c394c29afe2db8f9481d6
Added Reference

								
							
							
						
https://git.kernel.org/stable/c/aa77294b0f73bb8265987591460cd25b8722c3df
Added Reference

								
							
							
						
https://git.kernel.org/stable/c/e2ab67672b2288521a6146034a971f9a82ffc5c5