CVE-2024-53141

Published Dec 6, 2024

Last updated 4 months ago

Linux Kernel

Overview

AI description

Generated using AI and has not been reviewed by Intruder. May contain errors.

CVE-2024-53141 is a vulnerability in the Linux kernel's netfilter subsystem, specifically within the ipset component. The flaw stems from a missing range check in the `bitmap_ip_uadt` function when handling `IPSET_ATTR_CIDR` parameters. The vulnerability occurs when `tb[IPSET_ATTR_IP_TO]` is absent, but `tb[IPSET_ATTR_CIDR]` is present, causing the `ip` and `ip_to` values to be swapped. This oversight leads to an out-of-bounds memory access, potentially allowing attackers to manipulate memory outside the intended boundaries.

Description: In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: add missing range check in bitmap_ip_uadt When tb[IPSET_ATTR_IP_TO] is not present but tb[IPSET_ATTR_CIDR] exists, the values of ip and ip_to are slightly swapped. Therefore, the range check for ip should be done later, but this part is missing and it seems that the vulnerability occurs. So we should add missing range checks and remove unnecessary range checks.
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
NVD status: Modified

Risk scores

CVSS 3.1

Type: Primary
Base score: 7.8
Impact score: 5.9
Exploitability score: 1.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity: HIGH

Weaknesses

nvd@nist.gov: NVD-CWE-noinfo

Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.

Hype score: 21

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0C7770FA-B486-4531-9A29-FE9BC1D2E0D9",
            "versionEndExcluding": "4.19.325",
            "versionStartIncluding": "2.6.39"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D42B3E7C-85DF-4DBF-A6EC-E45F69FF2DCA",
            "versionEndExcluding": "6.6.64",
            "versionStartIncluding": "4.20"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "21434379-192D-472F-9B54-D45E3650E893",
            "versionEndExcluding": "6.11.11",
            "versionStartIncluding": "6.7"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D8882B1B-2ABC-4838-AC1D-DBDBB5764776",
            "versionEndExcluding": "6.12.2",
            "versionStartIncluding": "6.12"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]