In the Linux kernel, the following vulnerability has been resolved:
netfilter: ipset: Fix overflow before widen in the bitmapipcreate() function.
When firstip is 0, lastip is 0xFFFFFFFF, and netmask is 31, the value of an arithmetic expression 2 << (netmask - mask_bits - 1) is subject to overflow due to a failure casting operands to a larger data type before performing the arithmetic.
Note that it's harmless since the value will be checked at the next step.
Found by InfoTeCS on behalf of Linux Verification Center (linuxtesting.org) with SVACE.
[
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e137d9bb26bd85ce07323a38e38ceb0b160db841",
"id": "CVE-2023-53032-08091491",
"signature_version": "v1",
"target": {
"file": "net/netfilter/ipset/ip_set_bitmap_ip.c"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"308073368611458924068071683154579406709",
"336837507349640833677948641918975034624",
"159269760216378735459596469931032545521",
"83281806892357236274954625405991810864",
"139268292160448493679599954892793034832"
],
"threshold": 0.9
}
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4e6a70fd840400e3a2e784a6673968a3eb2431c0",
"id": "CVE-2023-53032-0ea7d0da",
"signature_version": "v1",
"target": {
"file": "net/netfilter/ipset/ip_set_bitmap_ip.c"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"308073368611458924068071683154579406709",
"336837507349640833677948641918975034624",
"159269760216378735459596469931032545521",
"83281806892357236274954625405991810864",
"139268292160448493679599954892793034832"
],
"threshold": 0.9
}
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e137d9bb26bd85ce07323a38e38ceb0b160db841",
"id": "CVE-2023-53032-0f5327ae",
"signature_version": "v1",
"target": {
"function": "bitmap_ip_create",
"file": "net/netfilter/ipset/ip_set_bitmap_ip.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "198392844247979166193349096000070604817",
"length": 2032.0
}
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@feefb33eefa166fc3e0fd17547b0bc0cb3baced9",
"id": "CVE-2023-53032-3bae323b",
"signature_version": "v1",
"target": {
"function": "bitmap_ip_create",
"file": "net/netfilter/ipset/ip_set_bitmap_ip.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "201915641721613634246100972384794346765",
"length": 2011.0
}
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@511cf17b2447fc41cfef8d71936e1fa53e395c1e",
"id": "CVE-2023-53032-442916d8",
"signature_version": "v1",
"target": {
"function": "bitmap_ip_create",
"file": "net/netfilter/ipset/ip_set_bitmap_ip.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "201915641721613634246100972384794346765",
"length": 2011.0
}
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@feefb33eefa166fc3e0fd17547b0bc0cb3baced9",
"id": "CVE-2023-53032-4a9f5aee",
"signature_version": "v1",
"target": {
"file": "net/netfilter/ipset/ip_set_bitmap_ip.c"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"308073368611458924068071683154579406709",
"336837507349640833677948641918975034624",
"159269760216378735459596469931032545521",
"83281806892357236274954625405991810864",
"139268292160448493679599954892793034832"
],
"threshold": 0.9
}
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4e6a70fd840400e3a2e784a6673968a3eb2431c0",
"id": "CVE-2023-53032-542c81b1",
"signature_version": "v1",
"target": {
"function": "bitmap_ip_create",
"file": "net/netfilter/ipset/ip_set_bitmap_ip.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "201915641721613634246100972384794346765",
"length": 2011.0
}
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9ea4b476cea1b7d461d16dda25ca3c7e616e2d15",
"id": "CVE-2023-53032-5b42e39f",
"signature_version": "v1",
"target": {
"file": "net/netfilter/ipset/ip_set_bitmap_ip.c"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"308073368611458924068071683154579406709",
"336837507349640833677948641918975034624",
"159269760216378735459596469931032545521",
"83281806892357236274954625405991810864",
"139268292160448493679599954892793034832"
],
"threshold": 0.9
}
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dfd834ccc1b88bbbab81b9046a3a539dd0c2d14f",
"id": "CVE-2023-53032-5f0000b5",
"signature_version": "v1",
"target": {
"file": "net/netfilter/ipset/ip_set_bitmap_ip.c"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"308073368611458924068071683154579406709",
"336837507349640833677948641918975034624",
"159269760216378735459596469931032545521",
"83281806892357236274954625405991810864",
"139268292160448493679599954892793034832"
],
"threshold": 0.9
}
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e88865876d47c790be0d5e23973499d75d034364",
"id": "CVE-2023-53032-6c2d1d4b",
"signature_version": "v1",
"target": {
"function": "bitmap_ip_create",
"file": "net/netfilter/ipset/ip_set_bitmap_ip.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "201915641721613634246100972384794346765",
"length": 2011.0
}
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9ea4b476cea1b7d461d16dda25ca3c7e616e2d15",
"id": "CVE-2023-53032-adac0831",
"signature_version": "v1",
"target": {
"function": "bitmap_ip_create",
"file": "net/netfilter/ipset/ip_set_bitmap_ip.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "201915641721613634246100972384794346765",
"length": 2011.0
}
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@511cf17b2447fc41cfef8d71936e1fa53e395c1e",
"id": "CVE-2023-53032-bc5dc698",
"signature_version": "v1",
"target": {
"file": "net/netfilter/ipset/ip_set_bitmap_ip.c"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"308073368611458924068071683154579406709",
"336837507349640833677948641918975034624",
"159269760216378735459596469931032545521",
"83281806892357236274954625405991810864",
"139268292160448493679599954892793034832"
],
"threshold": 0.9
}
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e88865876d47c790be0d5e23973499d75d034364",
"id": "CVE-2023-53032-f5577070",
"signature_version": "v1",
"target": {
"file": "net/netfilter/ipset/ip_set_bitmap_ip.c"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"308073368611458924068071683154579406709",
"336837507349640833677948641918975034624",
"159269760216378735459596469931032545521",
"83281806892357236274954625405991810864",
"139268292160448493679599954892793034832"
],
"threshold": 0.9
}
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dfd834ccc1b88bbbab81b9046a3a539dd0c2d14f",
"id": "CVE-2023-53032-fc2472d3",
"signature_version": "v1",
"target": {
"function": "bitmap_ip_create",
"file": "net/netfilter/ipset/ip_set_bitmap_ip.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "201915641721613634246100972384794346765",
"length": 2011.0
}
}
]