CVE detail
CVE-2026-52921
In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: stop hash:* range iteration at end The following hash set variants: hash:ip,mark hash:ip,port hash:ip,port,ip hash:ip,port,net iterate IPv4 ranges with a 32-bit iterator. The iterator must stop once the last address in the requested range has been processed. Advancing it once more can move the traversal state past the end of the request, so a later retry may continue from an unintended position. Handle the iterator increment explicitly at the end of the loop and stop once the upper bound has been processed. This keeps the existing retry behaviour intact for valid ranges while preventing traversal from continuing past the original boundary.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 23.0 · diversity 10.0 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
9 source links · newest first
Information published.
vendormsrc.microsoft.comJun 28, 2026, 8:57 AMNo excerpt available.
Exploitgit.kernel.orgJun 24, 2026, 8:16 AMNo excerpt available.
Exploitgit.kernel.orgJun 24, 2026, 8:16 AMNo excerpt available.
Exploitgit.kernel.orgJun 24, 2026, 8:16 AMNo excerpt available.
Exploitgit.kernel.orgJun 24, 2026, 8:16 AMNo excerpt available.
Exploitgit.kernel.orgJun 24, 2026, 8:16 AMNo excerpt available.
Exploitgit.kernel.orgJun 24, 2026, 8:16 AMNo excerpt available.
Exploitgit.kernel.orgJun 24, 2026, 8:16 AMNo excerpt available.
Exploitgit.kernel.orgJun 24, 2026, 8:16 AM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-64290CVSS 5.5 · Medium
In the Linux kernel, the following vulnerability has been resolved: iommufd: Break the loop on failure in iommufd_fault_fops_read() On a copy_to_user() failure inside the inner…
- CVE-2026-53312CVSS 5.5 · Medium
In the Linux kernel, the following vulnerability has been resolved: iommu/riscv: Remove overflows on the invalidation path Since RISC-V supports a sign extended page table it sh…
- CVE-2026-52965CVSS 5.5 · Medium
In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Fix ttm_bo_swapout() infinite LRU walk on swapout failure When ttm_tt_swapout() fails, the current c…
- CVE-2026-52933CVSS 7.8 · High
In the Linux kernel, the following vulnerability has been resolved: io_uring/poll: fix signed comparison in io_poll_get_ownership() io_poll_get_ownership() uses a signed compari…
- CVE-2026-46314CVSS 5.5 · Medium
In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Reject empty multisync extension to prevent infinite loop v3d_get_extensions() walks a userspace-pro…
- CVE-2026-46146CVSS 5.5 · Medium
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3() The convert_chmap_v3() has a loop with it…