Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2023-53179

netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 4.14.326, 4.19.295, 4.5, 4.10, 5.4.257, and 5 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: total

Summary

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c The missing IP_SET_HASH_WITH_NET0 macro in ip_set_hash_netportnet can lead to the use of wrong `CIDR_POS(c)` for calculating array offsets, which can lead to integer underflow. As a result, it leads to slab out-of-bound access. This patch adds back the IP_SET_HASH_WITH_NET0 macro to ip_set_hash_netportnet to address the issue.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: total

  3. Record last updated

Affected versions

  • Linux Linux

    From 0d5d0b5c41f766355f2b42c47d13ea001f754c7d · fixed in 7935b636dd693dfe4483cfef4a1e91366c8103fa; From cb3e590df429ce151d5041884a4947099b8ad6a7 · fixed in e632d09dffc68b9602d6893a99bfe3001d36cefc; From 886503f34d63e681662057448819edb5b1057a97 · fixed in 109e830585e89a03d554bf8ad0e668630d0a6260; From 886503f34d63e681662057448819edb5b1057a97 · fixed in 83091f8ac03f118086596f17c9a52d31d6ca94b3; From 886503f34d63e681662057448819edb5b1057a97 · fixed in a9e6142e5f8f6ac7d1bca45c1b2b13b084ea9e14; From 886503f34d63e681662057448819edb5b1057a97 · fixed in 7ca0706c68adadf86a36b60dca090f5e9481e808; From 886503f34d63e681662057448819edb5b1057a97 · fixed in d59b6fc405549f7caf31f6aa5da1d6bef746b166; From 886503f34d63e681662057448819edb5b1057a97 · fixed in d95c8420efe684b964e3aa28108e9a354bcd7225; From 886503f34d63e681662057448819edb5b1057a97 · fixed in 050d91c03b28ca479df13dfb02bcd2c60dd6a878; From 4.14.84 · fixed in 4.14.326; From 4.19.5 · fixed in 4.19.295; From 4.4.165 · fixed in 4.5; From 4.9.141 · fixed in 4.10

  • Linux Linux

    4.20

  • KernelLinux

    fixed in 4.14.326; From 4.15.0 · fixed in 4.19.295; From 4.20.0 · fixed in 5.4.257; fixed in 5.10.195; From 5.5.0 · fixed in 5.15.132; From 5.11.0 · fixed in 6.1.53; From 5.16.0 · fixed in 6.4.16; From 6.2.0 · fixed in 6.5.3

References 9

git.kernel.org