NetSight
IP …
high7.8

CVE-2023-53179

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c …

Impact

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c The missing IP_SET_HASH_WITH_NET0 macro in ip_set_hash_netportnet can lead to the use of wrong `CIDR_POS(c)` for calculating array offsets, which can lead to integer underflow. As a result, it leads to slab out-of-bound access. This patch adds back the IP_SET_HASH_WITH_NET0 macro to ip_set_hash_netportnet to address the issue.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.4.165 before 4.5
from 4.9.141 before 4.10
from 4.14.84 before 4.14.326
from 4.19.5 before 4.19.295
from 4.20.1 before 5.4.257
from 5.5 before 5.10.195

Weakness classification

CWE-787

References