Vulnerability · Published Dec 6, 2024 · Assigned by Linux
CVE-2024-53141netfilter: ipset: add missing range check in bitmap_ip_uadt
High 7.8
In plain English
A high-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 34% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.4%top 66.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: add missing range check in bitmap_ip_uadt When tb[IPSET_ATTR_IP_TO] is not present but tb[IPSET_ATTR_CIDR] exists, the values of ip and ip_to are slightly swapped. Therefore, the range check for ip should be done later, but this part is missing and it seems that the vulnerability occurs. So we should add missing range checks and remove unnecessary range checks.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | bpftool | 4.18.0-553.52.1.el8_10 | ALSA-2025:7531 |
| AlmaLinux:8 | kernel | 4.18.0-553.52.1.el8_10 | ALSA-2025:7531 |
| AlmaLinux:8 | kernel-abi-stablelists | 4.18.0-553.52.1.el8_10 | ALSA-2025:7531 |
| AlmaLinux:8 | kernel-core | 4.18.0-553.52.1.el8_10 | ALSA-2025:7531 |
| AlmaLinux:8 | kernel-cross-headers | 4.18.0-553.52.1.el8_10 | ALSA-2025:7531 |
| AlmaLinux:8 | kernel-debug | 4.18.0-553.52.1.el8_10 | ALSA-2025:7531 |
| AlmaLinux:8 | kernel-debug-core | 4.18.0-553.52.1.el8_10 | ALSA-2025:7531 |
| AlmaLinux:8 | kernel-debug-devel | 4.18.0-553.52.1.el8_10 | ALSA-2025:7531 |
| AlmaLinux:8 | kernel-debug-modules | 4.18.0-553.52.1.el8_10 | ALSA-2025:7531 |
| AlmaLinux:8 | kernel-debug-modules-extra | 4.18.0-553.52.1.el8_10 | ALSA-2025:7531 |
| AlmaLinux:8 | kernel-devel | 4.18.0-553.52.1.el8_10 | ALSA-2025:7531 |
| AlmaLinux:8 | kernel-doc | 4.18.0-553.52.1.el8_10 | ALSA-2025:7531 |
| AlmaLinux:8 | kernel-headers | 4.18.0-553.52.1.el8_10 | ALSA-2025:7531 |
| AlmaLinux:8 | kernel-modules | 4.18.0-553.52.1.el8_10 | ALSA-2025:7531 |
| AlmaLinux:8 | kernel-modules-extra | 4.18.0-553.52.1.el8_10 | ALSA-2025:7531 |
| AlmaLinux:8 | kernel-rt | 4.18.0-553.52.1.rt7.393.el8_10 | ALSA-2025:7532 |
| AlmaLinux:8 | kernel-rt-core | 4.18.0-553.52.1.rt7.393.el8_10 | ALSA-2025:7532 |
| AlmaLinux:8 | kernel-rt-debug | 4.18.0-553.52.1.rt7.393.el8_10 | ALSA-2025:7532 |
| AlmaLinux:8 | kernel-rt-debug-core | 4.18.0-553.52.1.rt7.393.el8_10 | ALSA-2025:7532 |
| AlmaLinux:8 | kernel-rt-debug-devel | 4.18.0-553.52.1.rt7.393.el8_10 | ALSA-2025:7532 |
| AlmaLinux:8 | kernel-rt-debug-modules | 4.18.0-553.52.1.rt7.393.el8_10 | ALSA-2025:7532 |
| AlmaLinux:8 | kernel-rt-debug-modules-extra | 4.18.0-553.52.1.rt7.393.el8_10 | ALSA-2025:7532 |
| AlmaLinux:8 | kernel-rt-devel | 4.18.0-553.52.1.rt7.393.el8_10 | ALSA-2025:7532 |
| AlmaLinux:8 | kernel-rt-modules | 4.18.0-553.52.1.rt7.393.el8_10 | ALSA-2025:7532 |
| AlmaLinux:8 | kernel-rt-modules-extra | 4.18.0-553.52.1.rt7.393.el8_10 | ALSA-2025:7532 |
| AlmaLinux:8 | kernel-tools | 4.18.0-553.52.1.el8_10 | ALSA-2025:7531 |
| AlmaLinux:8 | kernel-tools-libs | 4.18.0-553.52.1.el8_10 | ALSA-2025:7531 |
| AlmaLinux:8 | kernel-tools-libs-devel | 4.18.0-553.52.1.el8_10 | ALSA-2025:7531 |
| AlmaLinux:8 | kernel-zfcpdump | 4.18.0-553.52.1.el8_10 | ALSA-2025:7531 |
| AlmaLinux:8 | kernel-zfcpdump-core | 4.18.0-553.52.1.el8_10 | ALSA-2025:7531 |
| AlmaLinux:8 | kernel-zfcpdump-devel | 4.18.0-553.52.1.el8_10 | ALSA-2025:7531 |
| AlmaLinux:8 | kernel-zfcpdump-modules | 4.18.0-553.52.1.el8_10 | ALSA-2025:7531 |
| AlmaLinux:8 | kernel-zfcpdump-modules-extra | 4.18.0-553.52.1.el8_10 | ALSA-2025:7531 |
| AlmaLinux:8 | perf | 4.18.0-553.52.1.el8_10 | ALSA-2025:7531 |
| AlmaLinux:8 | python3-perf | 4.18.0-553.52.1.el8_10 | ALSA-2025:7531 |
| Debian:12 | linux | 6.1.123-1 | DEBIAN-CVE-2024-53141 |
| Debian:13 | linux | 6.12.3-1 | DEBIAN-CVE-2024-53141 |
| Debian:14 | linux | 6.12.3-1 | DEBIAN-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux | 5.15.0-131.141 | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux | 5.15.0-131.141 | USN-7235-1 |
| Ubuntu:24.04:LTS | linux | 6.8.0-52.53 | UBUNTU-CVE-2024-53141 |
| Ubuntu:24.04:LTS | linux | 6.8.0-52.53 | USN-7236-1 |
| Ubuntu:22.04:LTS | linux-allwinner-5.19 | no fix listed | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-aws | 5.15.0-1078.85 | UBUNTU-CVE-2024-53141 |
| Ubuntu:24.04:LTS | linux-aws | 6.8.0-1023.25 | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-aws-5.19 | no fix listed | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-aws-6.2 | no fix listed | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-aws-6.5 | no fix listed | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-aws-6.8 | 6.8.0-1023.25~22.04.1 | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-azure | 5.15.0-1079.88 | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-azure | 5.15.0-1079.88 | USN-7235-1 |
| Ubuntu:24.04:LTS | linux-azure | 6.8.0-1021.25 | USN-7236-1 |
| Ubuntu:24.04:LTS | linux-azure | 6.8.0-1021.25 | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-azure-5.19 | no fix listed | UBUNTU-CVE-2024-53141 |
| Ubuntu:24.04:LTS | linux-azure-6.11 | 6.11.0-1012.12~24.04.1 | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-azure-6.2 | no fix listed | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-azure-6.5 | no fix listed | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-azure-6.8 | 6.8.0-1021.25~22.04.1 | USN-7236-3 |
| Ubuntu:22.04:LTS | linux-azure-6.8 | 6.8.0-1021.25~22.04.1 | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-azure-fde | 5.15.0-1081.90.1 | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-azure-fde-5.19 | no fix listed | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-azure-fde-6.2 | no fix listed | UBUNTU-CVE-2024-53141 |
| Ubuntu:24.04:LTS | linux-azure-nvidia | 6.8.0-1014.15 | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-gcp | 5.15.0-1075.84 | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-gcp | 5.15.0-1075.84 | USN-7235-1 |
| Ubuntu:24.04:LTS | linux-gcp | 6.8.0-1021.23 | UBUNTU-CVE-2024-53141 |
| Ubuntu:24.04:LTS | linux-gcp | 6.8.0-1021.23 | USN-7236-1 |
| Ubuntu:22.04:LTS | linux-gcp-5.19 | no fix listed | UBUNTU-CVE-2024-53141 |
| Ubuntu:24.04:LTS | linux-gcp-6.11 | 6.11.0-1011.11~24.04.1 | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-gcp-6.2 | no fix listed | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-gcp-6.5 | no fix listed | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-gcp-6.8 | 6.8.0-1021.23~22.04.1 | USN-7236-1 |
| Ubuntu:22.04:LTS | linux-gcp-6.8 | 6.8.0-1021.23~22.04.1 | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-gke | 5.15.0-1073.79 | USN-7235-1 |
| Ubuntu:22.04:LTS | linux-gke | 5.15.0-1073.79 | UBUNTU-CVE-2024-53141 |
| Ubuntu:24.04:LTS | linux-gke | 6.8.0-1017.21 | UBUNTU-CVE-2024-53141 |
| Ubuntu:24.04:LTS | linux-gke | 6.8.0-1017.21 | USN-7236-1 |
| Ubuntu:22.04:LTS | linux-gkeop | 5.15.0-1059.67 | USN-7235-1 |
| Ubuntu:22.04:LTS | linux-gkeop | 5.15.0-1059.67 | UBUNTU-CVE-2024-53141 |
| Ubuntu:24.04:LTS | linux-gkeop | 6.8.0-1004.6 | USN-7236-1 |
| Ubuntu:24.04:LTS | linux-gkeop | 6.8.0-1004.6 | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-hwe-5.19 | no fix listed | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-hwe-6.2 | no fix listed | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-hwe-6.5 | no fix listed | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-hwe-6.8 | 6.8.0-52.53~22.04.1 | USN-7236-1 |
| Ubuntu:22.04:LTS | linux-hwe-6.8 | 6.8.0-52.53~22.04.1 | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-ibm | 5.15.0-1069.72 | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-ibm | 5.15.0-1069.72 | USN-7235-1 |
| Ubuntu:24.04:LTS | linux-ibm | 6.8.0-1019.19 | USN-7236-1 |
| Ubuntu:24.04:LTS | linux-ibm | 6.8.0-1019.19 | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-ibm-6.8 | 6.8.0-1019.19~22.04.1 | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-intel-iotg | 5.15.0-1072.78 | USN-7235-1 |
| Ubuntu:22.04:LTS | linux-intel-iotg | 5.15.0-1072.78 | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-kvm | 5.15.0-1073.78 | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-kvm | 5.15.0-1073.78 | USN-7235-1 |
| Ubuntu:22.04:LTS | linux-lowlatency | 5.15.0-131.141 | USN-7235-1 |
| Ubuntu:22.04:LTS | linux-lowlatency | 5.15.0-131.141 | UBUNTU-CVE-2024-53141 |
| Ubuntu:24.04:LTS | linux-lowlatency | 6.8.0-52.53.1 | UBUNTU-CVE-2024-53141 |
| Ubuntu:24.04:LTS | linux-lowlatency | 6.8.0-52.53.1 | USN-7236-1 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-5.19 | no fix listed | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.2 | no fix listed | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.5 | no fix listed | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.8 | 6.8.0-52.53.1~22.04.1 | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-lowlatency-hwe-6.8 | 6.8.0-52.53.1~22.04.1 | USN-7236-2 |
| Ubuntu:22.04:LTS | linux-nvidia | 5.15.0-1071.72 | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-nvidia | 5.15.0-1071.72 | USN-7235-1 |
| Ubuntu:24.04:LTS | linux-nvidia | 6.8.0-1021.23 | UBUNTU-CVE-2024-53141 |
| Ubuntu:24.04:LTS | linux-nvidia | 6.8.0-1021.23 | USN-7236-1 |
| Ubuntu:24.04:LTS | linux-nvidia-6.11 | 6.11.0-1007.7 | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-nvidia-6.2 | no fix listed | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-nvidia-6.5 | no fix listed | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-nvidia-6.8 | 6.8.0-1021.23~22.04.1 | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-nvidia-6.8 | 6.8.0-1021.23~22.04.1 | USN-7236-1 |
| Ubuntu:24.04:LTS | linux-nvidia-lowlatency | 6.8.0-1021.23.1 | UBUNTU-CVE-2024-53141 |
| Ubuntu:24.04:LTS | linux-nvidia-lowlatency | 6.8.0-1021.23.1 | USN-7236-1 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra | 5.15.0-1033.33 | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-nvidia-tegra-igx | 5.15.0-1021.21 | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-oem-5.17 | no fix listed | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-oem-6.0 | no fix listed | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-oem-6.1 | no fix listed | UBUNTU-CVE-2024-53141 |
| Ubuntu:24.04:LTS | linux-oem-6.11 | 6.11.0-1015.15 | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-oem-6.5 | no fix listed | UBUNTU-CVE-2024-53141 |
| Ubuntu:24.04:LTS | linux-oem-6.8 | 6.8.0-1020.20 | USN-7237-1 |
| Ubuntu:24.04:LTS | linux-oem-6.8 | 6.8.0-1020.20 | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-oracle | 5.15.0-1074.80 | USN-7235-1 |
| Ubuntu:22.04:LTS | linux-oracle | 5.15.0-1074.80 | UBUNTU-CVE-2024-53141 |
| Ubuntu:24.04:LTS | linux-oracle | 6.8.0-1019.20 | UBUNTU-CVE-2024-53141 |
| Ubuntu:24.04:LTS | linux-oracle | 6.8.0-1019.20 | USN-7236-1 |
| Ubuntu:22.04:LTS | linux-oracle-6.5 | no fix listed | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-oracle-6.8 | 6.8.0-1019.20~22.04.1 | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-oracle-6.8 | 6.8.0-1019.20~22.04.1 | USN-7236-1 |
| Ubuntu:22.04:LTS | linux-raspi | 5.15.0-1071.74 | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-raspi | 5.15.0-1071.74 | USN-7235-1 |
| Ubuntu:24.04:LTS | linux-raspi | 6.8.0-1018.20 | USN-7236-1 |
| Ubuntu:24.04:LTS | linux-raspi | 6.8.0-1018.20 | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-realtime | no fix listed | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-riscv | no fix listed | UBUNTU-CVE-2024-53141 |
| Ubuntu:24.04:LTS | linux-riscv | 6.8.0-52.53.1 | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-riscv-5.19 | no fix listed | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-riscv-6.5 | no fix listed | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-riscv-6.8 | 6.8.0-52.53.1~22.04.1 | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-starfive-5.19 | no fix listed | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-starfive-6.2 | no fix listed | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-starfive-6.5 | no fix listed | UBUNTU-CVE-2024-53141 |
| Ubuntu:24.04:LTS | linux-xilinx | 6.8.0-1017.18 | UBUNTU-CVE-2024-53141 |
| Ubuntu:22.04:LTS | linux-xilinx-zynqmp | 5.15.0-1044.48 | UBUNTU-CVE-2024-53141 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | 72205fc68bd13109576aa6c4c12c740962d28a6c – before 3c20b5948f119ae61ee35ad8584d666020c9158172205fc68bd13109576aa6c4c12c740962d28a6c – before 78b0f2028f1043227a8eb0c41944027fc6a0459672205fc68bd13109576aa6c4c12c740962d28a6c – before 2e151b8ca31607d14fddc4ad0f14da0893e1a7c772205fc68bd13109576aa6c4c12c740962d28a6c – before e67471437ae9083fa73fa67eee1573fec1b7c8cf72205fc68bd13109576aa6c4c12c740962d28a6c – before 7ffef5e5d5eeecd9687204a5ec2d863752aafb7e72205fc68bd13109576aa6c4c12c740962d28a6c – before 856023ef032d824309abd5c747241dffa33aae8c72205fc68bd13109576aa6c4c12c740962d28a6c – before 591efa494a1cf649f50a35def649c43ae984cd0372205fc68bd13109576aa6c4c12c740962d28a6c – before 15794835378ed56fb9bacc6a5dd3b9f33520604e |
| Linux | Linux | 2.6.39 |
References
- https://git.kernel.org/stable/c/3c20b5948f119ae61ee35ad8584d666020c91581
- https://git.kernel.org/stable/c/78b0f2028f1043227a8eb0c41944027fc6a04596
- https://git.kernel.org/stable/c/2e151b8ca31607d14fddc4ad0f14da0893e1a7c7
- https://git.kernel.org/stable/c/e67471437ae9083fa73fa67eee1573fec1b7c8cf
- https://git.kernel.org/stable/c/7ffef5e5d5eeecd9687204a5ec2d863752aafb7e
- https://git.kernel.org/stable/c/856023ef032d824309abd5c747241dffa33aae8c
- https://git.kernel.org/stable/c/591efa494a1cf649f50a35def649c43ae984cd03
- https://git.kernel.org/stable/c/15794835378ed56fb9bacc6a5dd3b9f33520604e
- https://git.kernel.org/stable/c/35f56c554eb1b56b77b3cf197a6b00922d49033d
- https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html
- https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html