In the Linux kernel, the following vulnerability has been resolved:
netfilter: ipset: add missing range check in bitmapipuadt
When tb[IPSETATTRIPTO] is not present but tb[IPSETATTRCIDR] exists, the values of ip and ipto are slightly swapped. Therefore, the range check for ip should be done later, but this part is missing and it seems that the vulnerability occurs.
So we should add missing range checks and remove unnecessary range checks.
{ "vanir_signatures": [ { "target": { "file": "net/netfilter/ipset/ip_set_bitmap_ip.c" }, "id": "CVE-2024-53141-00b52c9c", "signature_version": "v1", "digest": { "threshold": 0.9, "line_hashes": [ "243758811155028476947633880702449657253", "211447278124152220091089707759066351971", "41362025260907914560134281179285896454", "161285294185100370191802257013497791497", "193289575771773104805894122541164097815", "167510426576521992182991971150729231910", "322143443141738294663848982098883905617", "202837324122698270279881261059155211356", "259967040052378386141657498438562842665", "68157366132342037018639556168688581230", "291921776767610485783457761586981931731", "17054930241243251639514614681798435232" ] }, "deprecated": false, "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@78b0f2028f1043227a8eb0c41944027fc6a04596" }, { "target": { "file": "net/netfilter/ipset/ip_set_bitmap_ip.c" }, "id": "CVE-2024-53141-040892c7", "signature_version": "v1", "digest": { "threshold": 0.9, "line_hashes": [ "243758811155028476947633880702449657253", "211447278124152220091089707759066351971", "41362025260907914560134281179285896454", "161285294185100370191802257013497791497", "193289575771773104805894122541164097815", "167510426576521992182991971150729231910", "322143443141738294663848982098883905617", "202837324122698270279881261059155211356", "259967040052378386141657498438562842665", "68157366132342037018639556168688581230", "291921776767610485783457761586981931731", "17054930241243251639514614681798435232" ] }, "deprecated": false, "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@856023ef032d824309abd5c747241dffa33aae8c" }, { "target": { "file": "net/netfilter/ipset/ip_set_bitmap_ip.c", "function": "bitmap_ip_uadt" }, "id": "CVE-2024-53141-062947e6", "signature_version": "v1", "digest": { "length": 1565.0, "function_hash": "307600449283146734157829982692216187415" }, "deprecated": false, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@591efa494a1cf649f50a35def649c43ae984cd03" }, { "target": { "file": "net/netfilter/ipset/ip_set_bitmap_ip.c" }, "id": "CVE-2024-53141-2327f853", "signature_version": "v1", "digest": { "threshold": 0.9, "line_hashes": [ "243758811155028476947633880702449657253", "211447278124152220091089707759066351971", "41362025260907914560134281179285896454", "161285294185100370191802257013497791497", "193289575771773104805894122541164097815", "167510426576521992182991971150729231910", "322143443141738294663848982098883905617", "202837324122698270279881261059155211356", "259967040052378386141657498438562842665", "68157366132342037018639556168688581230", "291921776767610485783457761586981931731", "17054930241243251639514614681798435232" ] }, "deprecated": false, "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@15794835378ed56fb9bacc6a5dd3b9f33520604e" }, { "target": { "file": "net/netfilter/ipset/ip_set_bitmap_ip.c", "function": "bitmap_ip_uadt" }, "id": "CVE-2024-53141-361224fc", "signature_version": "v1", "digest": { "length": 1565.0, "function_hash": "307600449283146734157829982692216187415" }, "deprecated": false, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@35f56c554eb1b56b77b3cf197a6b00922d49033d" }, { "target": { "file": "net/netfilter/ipset/ip_set_bitmap_ip.c", "function": "bitmap_ip_uadt" }, "id": "CVE-2024-53141-6c843941", "signature_version": "v1", "digest": { "length": 1565.0, "function_hash": "307600449283146734157829982692216187415" }, "deprecated": false, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3c20b5948f119ae61ee35ad8584d666020c91581" }, { "target": { "file": "net/netfilter/ipset/ip_set_bitmap_ip.c", "function": "bitmap_ip_uadt" }, "id": "CVE-2024-53141-730847c0", "signature_version": "v1", "digest": { "length": 1565.0, "function_hash": "307600449283146734157829982692216187415" }, "deprecated": false, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2e151b8ca31607d14fddc4ad0f14da0893e1a7c7" }, { "target": { "file": "net/netfilter/ipset/ip_set_bitmap_ip.c" }, "id": "CVE-2024-53141-84cfcaf3", "signature_version": "v1", "digest": { "threshold": 0.9, "line_hashes": [ "243758811155028476947633880702449657253", "211447278124152220091089707759066351971", "41362025260907914560134281179285896454", "161285294185100370191802257013497791497", "193289575771773104805894122541164097815", "167510426576521992182991971150729231910", "322143443141738294663848982098883905617", "202837324122698270279881261059155211356", "259967040052378386141657498438562842665", "68157366132342037018639556168688581230", "291921776767610485783457761586981931731", "17054930241243251639514614681798435232" ] }, "deprecated": false, "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7ffef5e5d5eeecd9687204a5ec2d863752aafb7e" }, { "target": { "file": "net/netfilter/ipset/ip_set_bitmap_ip.c" }, "id": "CVE-2024-53141-87455109", "signature_version": "v1", "digest": { "threshold": 0.9, "line_hashes": [ "243758811155028476947633880702449657253", "211447278124152220091089707759066351971", "41362025260907914560134281179285896454", "161285294185100370191802257013497791497", "193289575771773104805894122541164097815", "167510426576521992182991971150729231910", "322143443141738294663848982098883905617", "202837324122698270279881261059155211356", "259967040052378386141657498438562842665", "68157366132342037018639556168688581230", "291921776767610485783457761586981931731", "17054930241243251639514614681798435232" ] }, "deprecated": false, "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3c20b5948f119ae61ee35ad8584d666020c91581" }, { "target": { "file": "net/netfilter/ipset/ip_set_bitmap_ip.c", "function": "bitmap_ip_uadt" }, "id": "CVE-2024-53141-87bf3e4e", "signature_version": "v1", "digest": { "length": 1565.0, "function_hash": "307600449283146734157829982692216187415" }, "deprecated": false, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@78b0f2028f1043227a8eb0c41944027fc6a04596" }, { "target": { "file": "net/netfilter/ipset/ip_set_bitmap_ip.c" }, "id": "CVE-2024-53141-8e4cf33e", "signature_version": "v1", "digest": { "threshold": 0.9, "line_hashes": [ "243758811155028476947633880702449657253", "211447278124152220091089707759066351971", "41362025260907914560134281179285896454", "161285294185100370191802257013497791497", "193289575771773104805894122541164097815", "167510426576521992182991971150729231910", "322143443141738294663848982098883905617", "202837324122698270279881261059155211356", "259967040052378386141657498438562842665", "68157366132342037018639556168688581230", "291921776767610485783457761586981931731", "17054930241243251639514614681798435232" ] }, "deprecated": false, "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@591efa494a1cf649f50a35def649c43ae984cd03" }, { "target": { "file": "net/netfilter/ipset/ip_set_bitmap_ip.c" }, "id": "CVE-2024-53141-a4c60e36", "signature_version": "v1", "digest": { "threshold": 0.9, "line_hashes": [ "243758811155028476947633880702449657253", "211447278124152220091089707759066351971", "41362025260907914560134281179285896454", "161285294185100370191802257013497791497", "193289575771773104805894122541164097815", "167510426576521992182991971150729231910", "322143443141738294663848982098883905617", "202837324122698270279881261059155211356", "259967040052378386141657498438562842665", "68157366132342037018639556168688581230", "291921776767610485783457761586981931731", "17054930241243251639514614681798435232" ] }, "deprecated": false, "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2e151b8ca31607d14fddc4ad0f14da0893e1a7c7" }, { "target": { "file": "net/netfilter/ipset/ip_set_bitmap_ip.c", "function": "bitmap_ip_uadt" }, "id": "CVE-2024-53141-a94b71df", "signature_version": "v1", "digest": { "length": 1565.0, "function_hash": "307600449283146734157829982692216187415" }, "deprecated": false, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@856023ef032d824309abd5c747241dffa33aae8c" }, { "target": { "file": "net/netfilter/ipset/ip_set_bitmap_ip.c", "function": "bitmap_ip_uadt" }, "id": "CVE-2024-53141-beabc81a", "signature_version": "v1", "digest": { "length": 1565.0, "function_hash": "307600449283146734157829982692216187415" }, "deprecated": false, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e67471437ae9083fa73fa67eee1573fec1b7c8cf" }, { "target": { "file": "net/netfilter/ipset/ip_set_bitmap_ip.c" }, "id": "CVE-2024-53141-c2e31ea5", "signature_version": "v1", "digest": { "threshold": 0.9, "line_hashes": [ "243758811155028476947633880702449657253", "211447278124152220091089707759066351971", "41362025260907914560134281179285896454", "161285294185100370191802257013497791497", "193289575771773104805894122541164097815", "167510426576521992182991971150729231910", "322143443141738294663848982098883905617", "202837324122698270279881261059155211356", "259967040052378386141657498438562842665", "68157366132342037018639556168688581230", "291921776767610485783457761586981931731", "17054930241243251639514614681798435232" ] }, "deprecated": false, "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e67471437ae9083fa73fa67eee1573fec1b7c8cf" }, { "target": { "file": "net/netfilter/ipset/ip_set_bitmap_ip.c", "function": "bitmap_ip_uadt" }, "id": "CVE-2024-53141-dc37fc24", "signature_version": "v1", "digest": { "length": 1565.0, "function_hash": "307600449283146734157829982692216187415" }, "deprecated": false, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@15794835378ed56fb9bacc6a5dd3b9f33520604e" }, { "target": { "file": "net/netfilter/ipset/ip_set_bitmap_ip.c", "function": "bitmap_ip_uadt" }, "id": "CVE-2024-53141-ea5aecb1", "signature_version": "v1", "digest": { "length": 1565.0, "function_hash": "307600449283146734157829982692216187415" }, "deprecated": false, "signature_type": "Function", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7ffef5e5d5eeecd9687204a5ec2d863752aafb7e" }, { "target": { "file": "net/netfilter/ipset/ip_set_bitmap_ip.c" }, "id": "CVE-2024-53141-fa704f13", "signature_version": "v1", "digest": { "threshold": 0.9, "line_hashes": [ "243758811155028476947633880702449657253", "211447278124152220091089707759066351971", "41362025260907914560134281179285896454", "161285294185100370191802257013497791497", "193289575771773104805894122541164097815", "167510426576521992182991971150729231910", "322143443141738294663848982098883905617", "202837324122698270279881261059155211356", "259967040052378386141657498438562842665", "68157366132342037018639556168688581230", "291921776767610485783457761586981931731", "17054930241243251639514614681798435232" ] }, "deprecated": false, "signature_type": "Line", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@35f56c554eb1b56b77b3cf197a6b00922d49033d" } ] }