← Back

CVE-2023-53179

nvd nist
Published: Sep 15, 2025Modified: Dec 2, 2025

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c The missing IP_SET_HASH_WITH_NET0 macro in ip_set_hash_netportnet can lead to the use of wrong `CIDR_POS(c)` for calculating array offsets, which can lead to integer underflow. As a result, it leads to slab out-of-bound access. This patch adds back the IP_SET_HASH_WITH_NET0 macro to ip_set_hash_netportnet to address the issue.

Affected (17)

Products: Linux: Linux Kernel
1 product
Linux Kernel
Configuration A
17 vulnerable
Vulnerable SoftwareAffected Versions
Linux
From 4.14.84 to 4.14.326
From 4.19.5 to 4.19.295
From 4.20.1 to 5.4.257
From 4.4.165 to 4.5
From 4.9.141 to 4.10
From 5.11 to 5.15.132
From 5.16 to 6.1.53
From 5.5 to 5.10.195
From 6.2 to 6.4.16
From 6.5 to 6.5.3
Version 4.20
Version 4.20 rc2
Version 4.20 rc3
Version 4.20 rc4
Version 4.20 rc5
Version 4.20 rc6
Version 4.20 rc7

References (9)

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch

Timeline

No history available yet.