ipset

Keepalived contains an integer‑overflow bug in the VRRP ipset parsing code that was tracked as CVE‑2024‑41184; the flaw can be triggered by an empty ipset name in configuration, can produce undefined reads or crashes, and was patched upstream by adding strict validation so malformed or empty...

The Linux kernel vulnerability tracked as CVE-2025-37997 is a narrow but meaningful race-condition bug in netfilter’s ipset hash types that was fixed upstream in 2025; Microsoft’s public attestation names Azure Linux (the Azure-distributed Linux family previously known as CBL‑Mariner) as a...