In the Linux kernel, the following vulnerability has been resolved:
netfilter: ipset: add the missing IPSETHASHWITHNET0 macro for ipsethash_netportnet.c
The missing IPSETHASHWITHNET0 macro in ipsethashnetportnet can
lead to the use of wrong CIDR_POS(c)
for calculating array offsets,
which can lead to integer underflow. As a result, it leads to slab
out-of-bound access.
This patch adds back the IPSETHASHWITHNET0 macro to
ipsethashnetportnet to address the issue.