Linux Kernel Netfilter ipset Hash Type Region Locking Vulnerability

A vulnerability in the Linux kernel's netfilter ipset component affects hash types defined with timeouts. The issue arises from incorrect region locking, which can create a race condition between the garbage collector and the addition of new elements. This vulnerability is present in versions of the Linux kernel that include the faulty region locking introduced in v5.6-rc4.

Impact

Exploitation of this vulnerability can lead to a race condition, causing potential inconsistencies in how elements are managed within hash type sets, particularly those with timeouts.