- Vulnerability/
- CVE-2023-53032
CVE-2023-53032: netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function.
First published: Thu Mar 27 2025(Updated: )
In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. When first_ip is 0, last_ip is 0xFFFFFFFF, and netmask is 31, the value of an arithmetic expression 2 << (netmask - mask_bits - 1) is subject to overflow due to a failure casting operands to a larger data type before performing the arithmetic. Note that it's harmless since the value will be checked at the next step. Found by InfoTeCS on behalf of Linux Verification Center (linuxtesting.org) with SVACE.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Kernel |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/stable/c/e137d9bb26bd85ce07323a38e38ceb0b160db841
- https://git.kernel.org/stable/c/dfd834ccc1b88bbbab81b9046a3a539dd0c2d14f
- https://git.kernel.org/stable/c/feefb33eefa166fc3e0fd17547b0bc0cb3baced9
- https://git.kernel.org/stable/c/4e6a70fd840400e3a2e784a6673968a3eb2431c0
- https://git.kernel.org/stable/c/511cf17b2447fc41cfef8d71936e1fa53e395c1e
- https://git.kernel.org/stable/c/e88865876d47c790be0d5e23973499d75d034364
- https://git.kernel.org/stable/c/9ea4b476cea1b7d461d16dda25ca3c7e616e2d15
Frequently Asked Questions
What is the severity of CVE-2023-53032?
CVE-2023-53032 has a medium severity rating due to the potential for overflow in the Linux kernel's netfilter ipset functionality.
How do I fix CVE-2023-53032?
To fix CVE-2023-53032, update your Linux kernel to the latest version that contains the patch for this vulnerability.
What impact does CVE-2023-53032 have on affected systems?
CVE-2023-53032 can lead to unexpected behavior or crashes in networking operations using the bitmap_ip_create function.
Which versions of the Linux kernel are affected by CVE-2023-53032?
CVE-2023-53032 affects certain versions of the Linux kernel prior to the applied fix, specific versions may need to be reviewed for vulnerability.
What is the nature of CVE-2023-53032?
CVE-2023-53032 is an arithmetic overflow vulnerability in the bitmap_ip_create function of the Linux kernel's netfilter ipset.
- collector/mitre-cve
- source/MITRE
- collector/nvd-api
- source/NVD
- agent/type
- agent/description
- agent/first-publish-date
- agent/title
- agent/last-modified-date
- agent/references
- agent/author
- agent/source
- agent/event
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- vendor/linux
- canonical/linux kernel