In the Linux kernel, the following vulnerability has been resolved:
netfilter: ipset: add the missing IPSETHASHWITHNET0 macro for ipsethash_netportnet.c
The missing IPSETHASHWITHNET0 macro in ipsethashnetportnet can
lead to the use of wrong CIDR_POS(c) for calculating array offsets,
which can lead to integer underflow. As a result, it leads to slab
out-of-bound access.
This patch adds back the IPSETHASHWITHNET0 macro to
ipsethashnetportnet to address the issue.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53179.json"
}