CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's netfilter component, specifically in the ipset module, where lockless RCU readers improperly use the test_bit() function instead of the safer test_bit_acquire(). This flaw could lead to inconsistent memory visibility during concurrent operations, potentially compromising system stability and security. Linux system administrators and developers utilizing the affected kernel versions should prioritize applying patches to mitigate any risks associated with this vulnerability.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types Sashiko pointed out that there are a few lockless RCU readers using test_bit() which is a relaxed atomic operation and provides no memory barrier guarantees. Use test_bit_acquire() instead where the operation may run parallel with add/del/gc, i.e. is not one from the next cases - protected by region lock - in a set destroy phase - in a new/temporary set creation phase