In the Linux kernel, the following vulnerability has been resolved:
netfilter: ipset: add missing range check in bitmapipuadt
When tb[IPSETATTRIPTO] is not present but tb[IPSETATTRCIDR] exists, the values of ip and ipto are slightly swapped. Therefore, the range check for ip should be done later, but this part is missing and it seems that the vulnerability occurs.
So we should add missing range checks and remove unnecessary range checks.
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@78b0f2028f1043227a8eb0c41944027fc6a04596",
"target": {
"file": "net/netfilter/ipset/ip_set_bitmap_ip.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2024-53141-00b52c9c",
"digest": {
"threshold": 0.9,
"line_hashes": [
"243758811155028476947633880702449657253",
"211447278124152220091089707759066351971",
"41362025260907914560134281179285896454",
"161285294185100370191802257013497791497",
"193289575771773104805894122541164097815",
"167510426576521992182991971150729231910",
"322143443141738294663848982098883905617",
"202837324122698270279881261059155211356",
"259967040052378386141657498438562842665",
"68157366132342037018639556168688581230",
"291921776767610485783457761586981931731",
"17054930241243251639514614681798435232"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@856023ef032d824309abd5c747241dffa33aae8c",
"target": {
"file": "net/netfilter/ipset/ip_set_bitmap_ip.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2024-53141-040892c7",
"digest": {
"threshold": 0.9,
"line_hashes": [
"243758811155028476947633880702449657253",
"211447278124152220091089707759066351971",
"41362025260907914560134281179285896454",
"161285294185100370191802257013497791497",
"193289575771773104805894122541164097815",
"167510426576521992182991971150729231910",
"322143443141738294663848982098883905617",
"202837324122698270279881261059155211356",
"259967040052378386141657498438562842665",
"68157366132342037018639556168688581230",
"291921776767610485783457761586981931731",
"17054930241243251639514614681798435232"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@591efa494a1cf649f50a35def649c43ae984cd03",
"target": {
"function": "bitmap_ip_uadt",
"file": "net/netfilter/ipset/ip_set_bitmap_ip.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2024-53141-062947e6",
"digest": {
"length": 1565.0,
"function_hash": "307600449283146734157829982692216187415"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@15794835378ed56fb9bacc6a5dd3b9f33520604e",
"target": {
"file": "net/netfilter/ipset/ip_set_bitmap_ip.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2024-53141-2327f853",
"digest": {
"threshold": 0.9,
"line_hashes": [
"243758811155028476947633880702449657253",
"211447278124152220091089707759066351971",
"41362025260907914560134281179285896454",
"161285294185100370191802257013497791497",
"193289575771773104805894122541164097815",
"167510426576521992182991971150729231910",
"322143443141738294663848982098883905617",
"202837324122698270279881261059155211356",
"259967040052378386141657498438562842665",
"68157366132342037018639556168688581230",
"291921776767610485783457761586981931731",
"17054930241243251639514614681798435232"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@35f56c554eb1b56b77b3cf197a6b00922d49033d",
"target": {
"function": "bitmap_ip_uadt",
"file": "net/netfilter/ipset/ip_set_bitmap_ip.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2024-53141-361224fc",
"digest": {
"length": 1565.0,
"function_hash": "307600449283146734157829982692216187415"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3c20b5948f119ae61ee35ad8584d666020c91581",
"target": {
"function": "bitmap_ip_uadt",
"file": "net/netfilter/ipset/ip_set_bitmap_ip.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2024-53141-6c843941",
"digest": {
"length": 1565.0,
"function_hash": "307600449283146734157829982692216187415"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2e151b8ca31607d14fddc4ad0f14da0893e1a7c7",
"target": {
"function": "bitmap_ip_uadt",
"file": "net/netfilter/ipset/ip_set_bitmap_ip.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2024-53141-730847c0",
"digest": {
"length": 1565.0,
"function_hash": "307600449283146734157829982692216187415"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7ffef5e5d5eeecd9687204a5ec2d863752aafb7e",
"target": {
"file": "net/netfilter/ipset/ip_set_bitmap_ip.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2024-53141-84cfcaf3",
"digest": {
"threshold": 0.9,
"line_hashes": [
"243758811155028476947633880702449657253",
"211447278124152220091089707759066351971",
"41362025260907914560134281179285896454",
"161285294185100370191802257013497791497",
"193289575771773104805894122541164097815",
"167510426576521992182991971150729231910",
"322143443141738294663848982098883905617",
"202837324122698270279881261059155211356",
"259967040052378386141657498438562842665",
"68157366132342037018639556168688581230",
"291921776767610485783457761586981931731",
"17054930241243251639514614681798435232"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3c20b5948f119ae61ee35ad8584d666020c91581",
"target": {
"file": "net/netfilter/ipset/ip_set_bitmap_ip.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2024-53141-87455109",
"digest": {
"threshold": 0.9,
"line_hashes": [
"243758811155028476947633880702449657253",
"211447278124152220091089707759066351971",
"41362025260907914560134281179285896454",
"161285294185100370191802257013497791497",
"193289575771773104805894122541164097815",
"167510426576521992182991971150729231910",
"322143443141738294663848982098883905617",
"202837324122698270279881261059155211356",
"259967040052378386141657498438562842665",
"68157366132342037018639556168688581230",
"291921776767610485783457761586981931731",
"17054930241243251639514614681798435232"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@78b0f2028f1043227a8eb0c41944027fc6a04596",
"target": {
"function": "bitmap_ip_uadt",
"file": "net/netfilter/ipset/ip_set_bitmap_ip.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2024-53141-87bf3e4e",
"digest": {
"length": 1565.0,
"function_hash": "307600449283146734157829982692216187415"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@591efa494a1cf649f50a35def649c43ae984cd03",
"target": {
"file": "net/netfilter/ipset/ip_set_bitmap_ip.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2024-53141-8e4cf33e",
"digest": {
"threshold": 0.9,
"line_hashes": [
"243758811155028476947633880702449657253",
"211447278124152220091089707759066351971",
"41362025260907914560134281179285896454",
"161285294185100370191802257013497791497",
"193289575771773104805894122541164097815",
"167510426576521992182991971150729231910",
"322143443141738294663848982098883905617",
"202837324122698270279881261059155211356",
"259967040052378386141657498438562842665",
"68157366132342037018639556168688581230",
"291921776767610485783457761586981931731",
"17054930241243251639514614681798435232"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2e151b8ca31607d14fddc4ad0f14da0893e1a7c7",
"target": {
"file": "net/netfilter/ipset/ip_set_bitmap_ip.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2024-53141-a4c60e36",
"digest": {
"threshold": 0.9,
"line_hashes": [
"243758811155028476947633880702449657253",
"211447278124152220091089707759066351971",
"41362025260907914560134281179285896454",
"161285294185100370191802257013497791497",
"193289575771773104805894122541164097815",
"167510426576521992182991971150729231910",
"322143443141738294663848982098883905617",
"202837324122698270279881261059155211356",
"259967040052378386141657498438562842665",
"68157366132342037018639556168688581230",
"291921776767610485783457761586981931731",
"17054930241243251639514614681798435232"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@856023ef032d824309abd5c747241dffa33aae8c",
"target": {
"function": "bitmap_ip_uadt",
"file": "net/netfilter/ipset/ip_set_bitmap_ip.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2024-53141-a94b71df",
"digest": {
"length": 1565.0,
"function_hash": "307600449283146734157829982692216187415"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e67471437ae9083fa73fa67eee1573fec1b7c8cf",
"target": {
"function": "bitmap_ip_uadt",
"file": "net/netfilter/ipset/ip_set_bitmap_ip.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2024-53141-beabc81a",
"digest": {
"length": 1565.0,
"function_hash": "307600449283146734157829982692216187415"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e67471437ae9083fa73fa67eee1573fec1b7c8cf",
"target": {
"file": "net/netfilter/ipset/ip_set_bitmap_ip.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2024-53141-c2e31ea5",
"digest": {
"threshold": 0.9,
"line_hashes": [
"243758811155028476947633880702449657253",
"211447278124152220091089707759066351971",
"41362025260907914560134281179285896454",
"161285294185100370191802257013497791497",
"193289575771773104805894122541164097815",
"167510426576521992182991971150729231910",
"322143443141738294663848982098883905617",
"202837324122698270279881261059155211356",
"259967040052378386141657498438562842665",
"68157366132342037018639556168688581230",
"291921776767610485783457761586981931731",
"17054930241243251639514614681798435232"
]
},
"signature_type": "Line"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@15794835378ed56fb9bacc6a5dd3b9f33520604e",
"target": {
"function": "bitmap_ip_uadt",
"file": "net/netfilter/ipset/ip_set_bitmap_ip.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2024-53141-dc37fc24",
"digest": {
"length": 1565.0,
"function_hash": "307600449283146734157829982692216187415"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7ffef5e5d5eeecd9687204a5ec2d863752aafb7e",
"target": {
"function": "bitmap_ip_uadt",
"file": "net/netfilter/ipset/ip_set_bitmap_ip.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2024-53141-ea5aecb1",
"digest": {
"length": 1565.0,
"function_hash": "307600449283146734157829982692216187415"
},
"signature_type": "Function"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@35f56c554eb1b56b77b3cf197a6b00922d49033d",
"target": {
"file": "net/netfilter/ipset/ip_set_bitmap_ip.c"
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2024-53141-fa704f13",
"digest": {
"threshold": 0.9,
"line_hashes": [
"243758811155028476947633880702449657253",
"211447278124152220091089707759066351971",
"41362025260907914560134281179285896454",
"161285294185100370191802257013497791497",
"193289575771773104805894122541164097815",
"167510426576521992182991971150729231910",
"322143443141738294663848982098883905617",
"202837324122698270279881261059155211356",
"259967040052378386141657498438562842665",
"68157366132342037018639556168688581230",
"291921776767610485783457761586981931731",
"17054930241243251639514614681798435232"
]
},
"signature_type": "Line"
}
]