In the Linux kernel, the following vulnerability has been resolved:
netfilter: ipset: Fix overflow before widen in the bitmapipcreate() function.
When firstip is 0, lastip is 0xFFFFFFFF, and netmask is 31, the value of an arithmetic expression 2 << (netmask - mask_bits - 1) is subject to overflow due to a failure casting operands to a larger data type before performing the arithmetic.
Note that it's harmless since the value will be checked at the next step.
Found by InfoTeCS on behalf of Linux Verification Center (linuxtesting.org) with SVACE.
{ "vanir_signatures": [ { "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e137d9bb26bd85ce07323a38e38ceb0b160db841", "signature_type": "Line", "target": { "file": "net/netfilter/ipset/ip_set_bitmap_ip.c" }, "deprecated": false, "digest": { "line_hashes": [ "308073368611458924068071683154579406709", "336837507349640833677948641918975034624", "159269760216378735459596469931032545521", "83281806892357236274954625405991810864", "139268292160448493679599954892793034832" ], "threshold": 0.9 }, "id": "CVE-2023-53032-08091491" }, { "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4e6a70fd840400e3a2e784a6673968a3eb2431c0", "signature_type": "Line", "target": { "file": "net/netfilter/ipset/ip_set_bitmap_ip.c" }, "deprecated": false, "digest": { "line_hashes": [ "308073368611458924068071683154579406709", "336837507349640833677948641918975034624", "159269760216378735459596469931032545521", "83281806892357236274954625405991810864", "139268292160448493679599954892793034832" ], "threshold": 0.9 }, "id": "CVE-2023-53032-0ea7d0da" }, { "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e137d9bb26bd85ce07323a38e38ceb0b160db841", "signature_type": "Function", "target": { "function": "bitmap_ip_create", "file": "net/netfilter/ipset/ip_set_bitmap_ip.c" }, "deprecated": false, "digest": { "length": 2032.0, "function_hash": "198392844247979166193349096000070604817" }, "id": "CVE-2023-53032-0f5327ae" }, { "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@feefb33eefa166fc3e0fd17547b0bc0cb3baced9", "signature_type": "Function", "target": { "function": "bitmap_ip_create", "file": "net/netfilter/ipset/ip_set_bitmap_ip.c" }, "deprecated": false, "digest": { "length": 2011.0, "function_hash": "201915641721613634246100972384794346765" }, "id": "CVE-2023-53032-3bae323b" }, { "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@feefb33eefa166fc3e0fd17547b0bc0cb3baced9", "signature_type": "Line", "target": { "file": "net/netfilter/ipset/ip_set_bitmap_ip.c" }, "deprecated": false, "digest": { "line_hashes": [ "308073368611458924068071683154579406709", "336837507349640833677948641918975034624", "159269760216378735459596469931032545521", "83281806892357236274954625405991810864", "139268292160448493679599954892793034832" ], "threshold": 0.9 }, "id": "CVE-2023-53032-4a9f5aee" }, { "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4e6a70fd840400e3a2e784a6673968a3eb2431c0", "signature_type": "Function", "target": { "function": "bitmap_ip_create", "file": "net/netfilter/ipset/ip_set_bitmap_ip.c" }, "deprecated": false, "digest": { "length": 2011.0, "function_hash": "201915641721613634246100972384794346765" }, "id": "CVE-2023-53032-542c81b1" }, { "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9ea4b476cea1b7d461d16dda25ca3c7e616e2d15", "signature_type": "Line", "target": { "file": "net/netfilter/ipset/ip_set_bitmap_ip.c" }, "deprecated": false, "digest": { "line_hashes": [ "308073368611458924068071683154579406709", "336837507349640833677948641918975034624", "159269760216378735459596469931032545521", "83281806892357236274954625405991810864", "139268292160448493679599954892793034832" ], "threshold": 0.9 }, "id": "CVE-2023-53032-5b42e39f" }, { "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e88865876d47c790be0d5e23973499d75d034364", "signature_type": "Function", "target": { "function": "bitmap_ip_create", "file": "net/netfilter/ipset/ip_set_bitmap_ip.c" }, "deprecated": false, "digest": { "length": 2011.0, "function_hash": "201915641721613634246100972384794346765" }, "id": "CVE-2023-53032-6c2d1d4b" }, { "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9ea4b476cea1b7d461d16dda25ca3c7e616e2d15", "signature_type": "Function", "target": { "function": "bitmap_ip_create", "file": "net/netfilter/ipset/ip_set_bitmap_ip.c" }, "deprecated": false, "digest": { "length": 2011.0, "function_hash": "201915641721613634246100972384794346765" }, "id": "CVE-2023-53032-adac0831" }, { "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e88865876d47c790be0d5e23973499d75d034364", "signature_type": "Line", "target": { "file": "net/netfilter/ipset/ip_set_bitmap_ip.c" }, "deprecated": false, "digest": { "line_hashes": [ "308073368611458924068071683154579406709", "336837507349640833677948641918975034624", "159269760216378735459596469931032545521", "83281806892357236274954625405991810864", "139268292160448493679599954892793034832" ], "threshold": 0.9 }, "id": "CVE-2023-53032-f5577070" } ] }