CVE-2023-53032

netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function.

published March 27, 2025

CVSS
—
EPSS
0%
Percentile
9.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function.

When first_ip is 0, last_ip is 0xFFFFFFFF, and netmask is 31, the value of

an arithmetic expression 2 << (netmask - mask_bits - 1) is subject

to overflow due to a failure casting operands to a larger data type

before performing the arithmetic.

Note that it's harmless since the value will be checked at the next step.

Found by InfoTeCS on behalf of Linux Verification Center

(linuxtesting.org) with SVACE.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00201 · 9.5th percentile
Published
2025-03-27T16:44Z
EPSS history
Timeline
  • 27 MAR 16:44Z
    netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function.
    cvelistv5