CVE-2024-53141
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2024
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
netfilter: ipset: add missing range check in bitmap_ip_uadt
In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: add missing range check in bitmap_ip_uadt When tb[IPSET_ATTR_IP_TO] is not present but tb[IPSET_ATTR_CIDR] exists, the values of ip and ip_to are slightly swapped. Therefore, the range check for ip should be done later, but this part is missing and it seems that the vulnerability occurs. So we should add missing range checks and remove unnecessary range checks.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 72205fc68bd13109576aa6c4c12c740962d28a6c | affected | git | 3c20b5948f119ae61ee35ad8584d666020c91581 | Unavailable | None listed |
| 72205fc68bd13109576aa6c4c12c740962d28a6c | affected | git | 78b0f2028f1043227a8eb0c41944027fc6a04596 | Unavailable | None listed |
| 72205fc68bd13109576aa6c4c12c740962d28a6c | affected | git | 2e151b8ca31607d14fddc4ad0f14da0893e1a7c7 | Unavailable | None listed |
| 72205fc68bd13109576aa6c4c12c740962d28a6c | affected | git | e67471437ae9083fa73fa67eee1573fec1b7c8cf | Unavailable | None listed |
| 72205fc68bd13109576aa6c4c12c740962d28a6c | affected | git | 7ffef5e5d5eeecd9687204a5ec2d863752aafb7e | Unavailable | None listed |
| 72205fc68bd13109576aa6c4c12c740962d28a6c | affected | git | 856023ef032d824309abd5c747241dffa33aae8c | Unavailable | None listed |
| 72205fc68bd13109576aa6c4c12c740962d28a6c | affected | git | 591efa494a1cf649f50a35def649c43ae984cd03 | Unavailable | None listed |
| 72205fc68bd13109576aa6c4c12c740962d28a6c | affected | git | 15794835378ed56fb9bacc6a5dd3b9f33520604e | Unavailable | None listed |
| 72205fc68bd13109576aa6c4c12c740962d28a6c | affected | git | 35f56c554eb1b56b77b3cf197a6b00922d49033d | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 2.6.39 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 2.6.39 | Unavailable | None listed |
| 4.19.325 | unaffected | semver | Unavailable | 4.19.* | None listed |
| 5.4.287 | unaffected | semver | Unavailable | 5.4.* | None listed |
| 5.10.231 | unaffected | semver | Unavailable | 5.10.* | None listed |
| 5.15.174 | unaffected | semver | Unavailable | 5.15.* | None listed |
| 6.1.120 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.6.64 | unaffected | semver | Unavailable | 6.6.* | None listed |
| 6.11.11 | unaffected | semver | Unavailable | 6.11.* | None listed |
| 6.12.2 | unaffected | semver | Unavailable | 6.12.* | None listed |
| 6.13 | unaffected | original_commit_for_fix | Unavailable | * | None listed |