Bug 2330763 (CVE-2024-53141)

Summary:	CVE-2024-53141 kernel: netfilter: ipset: add missing range check in bitmap_ip_uadt
Product:	[Other] Security Response	Reporter:	OSIDB Bzimport <bzimport>
Component:	vulnerability	Assignee:	Product Security DevOps Team <prodsec-dev>
Status:	NEW ---	QA Contact:
Severity:	high	Docs Contact:
Priority:	high
Version:	unspecified	CC:	dfreiber, drow, jburrell, vkumar
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description OSIDB Bzimport 2024-12-06 10:01:01 UTC

In the Linux kernel, the following vulnerability has been resolved:

netfilter: ipset: add missing range check in bitmap_ip_uadt

When tb[IPSET_ATTR_IP_TO] is not present but tb[IPSET_ATTR_CIDR] exists,
the values of ip and ip_to are slightly swapped. Therefore, the range check
for ip should be done later, but this part is missing and it seems that the
vulnerability occurs.

So we should add missing range checks and remove unnecessary range checks.

Comment 1 Michal Findra 2024-12-06 11:57:12 UTC

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024120606-CVE-2024-53141-195b@gregkh/T

Comment 5 errata-xmlrpc 2025-05-14 00:23:50 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2025:7532 https://access.redhat.com/errata/RHSA-2025:7532

Comment 6 errata-xmlrpc 2025-05-14 00:33:05 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2025:7531 https://access.redhat.com/errata/RHSA-2025:7531

Comment 7 errata-xmlrpc 2025-05-14 00:33:20 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Extended Update Support

Via RHSA-2025:7534 https://access.redhat.com/errata/RHSA-2025:7534

Comment 8 errata-xmlrpc 2025-05-14 00:34:50 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Extended Update Support

Via RHSA-2025:7526 https://access.redhat.com/errata/RHSA-2025:7526

Comment 9 errata-xmlrpc 2025-05-14 00:43:50 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Extended Update Support

Via RHSA-2025:7533 https://access.redhat.com/errata/RHSA-2025:7533

Comment 10 errata-xmlrpc 2025-05-15 07:24:30 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions
  Red Hat Enterprise Linux 8.6 Telecommunications Update Service

Via RHSA-2025:7652 https://access.redhat.com/errata/RHSA-2025:7652

Comment 11 errata-xmlrpc 2025-05-15 13:10:49 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.2 Advanced Update Support

Via RHSA-2025:7675 https://access.redhat.com/errata/RHSA-2025:7675

Comment 12 errata-xmlrpc 2025-05-15 17:13:56 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.8 Extended Update Support

Via RHSA-2025:7682 https://access.redhat.com/errata/RHSA-2025:7682

Comment 13 errata-xmlrpc 2025-05-15 17:19:51 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 7 Extended Lifecycle Support

Via RHSA-2025:7732 https://access.redhat.com/errata/RHSA-2025:7732

Comment 14 errata-xmlrpc 2025-05-19 01:36:33 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions

Via RHSA-2025:7896 https://access.redhat.com/errata/RHSA-2025:7896

Comment 15 errata-xmlrpc 2025-05-19 01:46:52 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.4 Telecommunications Update Service
  Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions

Via RHSA-2025:7902 https://access.redhat.com/errata/RHSA-2025:7902

Comment 16 errata-xmlrpc 2025-05-19 01:49:59 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.4 Telecommunications Update Service
  Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions

Via RHSA-2025:7901 https://access.redhat.com/errata/RHSA-2025:7901

Comment 17 errata-xmlrpc 2025-05-19 01:50:30 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions

Via RHSA-2025:7897 https://access.redhat.com/errata/RHSA-2025:7897

Comment 18 errata-xmlrpc 2025-05-19 01:51:35 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 7.7 Advanced Update Support

Via RHSA-2025:7899 https://access.redhat.com/errata/RHSA-2025:7899

Comment 19 errata-xmlrpc 2025-05-19 01:54:39 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 7 Extended Lifecycle Support

Via RHSA-2025:7898 https://access.redhat.com/errata/RHSA-2025:7898

Comment 20 errata-xmlrpc 2025-06-02 02:07:26 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Extended Update Support

Via RHSA-2025:8342 https://access.redhat.com/errata/RHSA-2025:8342

Comment 21 errata-xmlrpc 2025-06-02 02:09:17 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions

Via RHSA-2025:8344 https://access.redhat.com/errata/RHSA-2025:8344

Comment 22 errata-xmlrpc 2025-06-02 02:31:53 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.8 Extended Update Support

Via RHSA-2025:8346 https://access.redhat.com/errata/RHSA-2025:8346

Comment 23 errata-xmlrpc 2025-06-02 02:32:03 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Extended Update Support

Via RHSA-2025:8343 https://access.redhat.com/errata/RHSA-2025:8343

Comment 24 errata-xmlrpc 2025-06-02 02:32:34 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2025:8345 https://access.redhat.com/errata/RHSA-2025:8345

Comment 25 errata-xmlrpc 2025-06-02 03:03:25 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions

Via RHSA-2025:8348 https://access.redhat.com/errata/RHSA-2025:8348

Comment 26 errata-xmlrpc 2025-06-02 03:13:37 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions

Via RHSA-2025:8347 https://access.redhat.com/errata/RHSA-2025:8347