Bug 2330763 (CVE-2024-53141) - CVE-2024-53141 kernel: netfilter: ipset: add missing range check in bitmap_ip_uadt
Summary: CVE-2024-53141 kernel: netfilter: ipset: add missing range check in bitmap_ip...
Keywords:
Status: NEW
Alias: CVE-2024-53141
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
high
high
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2024-12-06 10:01 UTC by OSIDB Bzimport
Modified: 2025-05-20 02:04 UTC (History)
4 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2025:7557 0 None None None 2025-05-14 04:53:57 UTC
Red Hat Product Errata RHBA-2025:7558 0 None None None 2025-05-14 05:02:33 UTC
Red Hat Product Errata RHBA-2025:7583 0 None None None 2025-05-14 10:36:09 UTC
Red Hat Product Errata RHBA-2025:7591 0 None None None 2025-05-14 11:39:21 UTC
Red Hat Product Errata RHBA-2025:7969 0 None None None 2025-05-19 09:57:13 UTC
Red Hat Product Errata RHBA-2025:8025 0 None None None 2025-05-20 02:04:05 UTC
Red Hat Product Errata RHSA-2025:7526 0 None None None 2025-05-14 00:34:51 UTC
Red Hat Product Errata RHSA-2025:7531 0 None None None 2025-05-14 00:33:06 UTC
Red Hat Product Errata RHSA-2025:7532 0 None None None 2025-05-14 00:23:51 UTC
Red Hat Product Errata RHSA-2025:7533 0 None None None 2025-05-14 00:43:51 UTC
Red Hat Product Errata RHSA-2025:7534 0 None None None 2025-05-14 00:33:22 UTC
Red Hat Product Errata RHSA-2025:7652 0 None None None 2025-05-15 07:24:32 UTC
Red Hat Product Errata RHSA-2025:7675 0 None None None 2025-05-15 13:10:51 UTC
Red Hat Product Errata RHSA-2025:7682 0 None None None 2025-05-15 17:13:57 UTC
Red Hat Product Errata RHSA-2025:7732 0 None None None 2025-05-15 17:19:53 UTC
Red Hat Product Errata RHSA-2025:7896 0 None None None 2025-05-19 01:36:35 UTC
Red Hat Product Errata RHSA-2025:7897 0 None None None 2025-05-19 01:50:31 UTC
Red Hat Product Errata RHSA-2025:7898 0 None None None 2025-05-19 01:54:40 UTC
Red Hat Product Errata RHSA-2025:7899 0 None None None 2025-05-19 01:51:36 UTC
Red Hat Product Errata RHSA-2025:7901 0 None None None 2025-05-19 01:50:00 UTC
Red Hat Product Errata RHSA-2025:7902 0 None None None 2025-05-19 01:46:53 UTC

Description OSIDB Bzimport 2024-12-06 10:01:01 UTC 
In the Linux kernel, the following vulnerability has been resolved:

netfilter: ipset: add missing range check in bitmap_ip_uadt

When tb[IPSET_ATTR_IP_TO] is not present but tb[IPSET_ATTR_CIDR] exists,
the values of ip and ip_to are slightly swapped. Therefore, the range check
for ip should be done later, but this part is missing and it seems that the
vulnerability occurs.

So we should add missing range checks and remove unnecessary range checks.
Comment 1 Michal Findra 2024-12-06 11:57:12 UTC 
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2024120606-CVE-2024-53141-195b@gregkh/T
Comment 5 errata-xmlrpc 2025-05-14 00:23:50 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2025:7532 https://access.redhat.com/errata/RHSA-2025:7532
Comment 6 errata-xmlrpc 2025-05-14 00:33:05 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2025:7531 https://access.redhat.com/errata/RHSA-2025:7531
Comment 7 errata-xmlrpc 2025-05-14 00:33:20 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Extended Update Support

Via RHSA-2025:7534 https://access.redhat.com/errata/RHSA-2025:7534
Comment 8 errata-xmlrpc 2025-05-14 00:34:50 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Extended Update Support

Via RHSA-2025:7526 https://access.redhat.com/errata/RHSA-2025:7526
Comment 9 errata-xmlrpc 2025-05-14 00:43:50 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Extended Update Support

Via RHSA-2025:7533 https://access.redhat.com/errata/RHSA-2025:7533
Comment 10 errata-xmlrpc 2025-05-15 07:24:30 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions
  Red Hat Enterprise Linux 8.6 Telecommunications Update Service

Via RHSA-2025:7652 https://access.redhat.com/errata/RHSA-2025:7652
Comment 11 errata-xmlrpc 2025-05-15 13:10:49 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.2 Advanced Update Support

Via RHSA-2025:7675 https://access.redhat.com/errata/RHSA-2025:7675
Comment 12 errata-xmlrpc 2025-05-15 17:13:56 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.8 Extended Update Support

Via RHSA-2025:7682 https://access.redhat.com/errata/RHSA-2025:7682
Comment 13 errata-xmlrpc 2025-05-15 17:19:51 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 7 Extended Lifecycle Support

Via RHSA-2025:7732 https://access.redhat.com/errata/RHSA-2025:7732
Comment 14 errata-xmlrpc 2025-05-19 01:36:33 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions

Via RHSA-2025:7896 https://access.redhat.com/errata/RHSA-2025:7896
Comment 15 errata-xmlrpc 2025-05-19 01:46:52 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.4 Telecommunications Update Service
  Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions

Via RHSA-2025:7902 https://access.redhat.com/errata/RHSA-2025:7902
Comment 16 errata-xmlrpc 2025-05-19 01:49:59 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.4 Telecommunications Update Service
  Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions

Via RHSA-2025:7901 https://access.redhat.com/errata/RHSA-2025:7901
Comment 17 errata-xmlrpc 2025-05-19 01:50:30 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions

Via RHSA-2025:7897 https://access.redhat.com/errata/RHSA-2025:7897
Comment 18 errata-xmlrpc 2025-05-19 01:51:35 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 7.7 Advanced Update Support

Via RHSA-2025:7899 https://access.redhat.com/errata/RHSA-2025:7899
Comment 19 errata-xmlrpc 2025-05-19 01:54:39 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 7 Extended Lifecycle Support

Via RHSA-2025:7898 https://access.redhat.com/errata/RHSA-2025:7898
Note You need to log in before you can comment on or make changes to this bug.