CVE-2023-53032— netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function.
Possible ATT&CK Techniques 1AI
T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 16
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | b9fed748185a96b7cfe74afac4bd228e8af16f01< e137d9bb26bd85ce07323a38e38ceb0b160db841 | affected |
b9fed748185a96b7cfe74afac4bd228e8af16f01< dfd834ccc1b88bbbab81b9046a3a539dd0c2d14f | affected | ||
b9fed748185a96b7cfe74afac4bd228e8af16f01< feefb33eefa166fc3e0fd17547b0bc0cb3baced9 | affected | ||
b9fed748185a96b7cfe74afac4bd228e8af16f01< 4e6a70fd840400e3a2e784a6673968a3eb2431c0 | affected | ||
b9fed748185a96b7cfe74afac4bd228e8af16f01< 511cf17b2447fc41cfef8d71936e1fa53e395c1e | affected | ||
b9fed748185a96b7cfe74afac4bd228e8af16f01< e88865876d47c790be0d5e23973499d75d034364 | affected | ||
b9fed748185a96b7cfe74afac4bd228e8af16f01< 9ea4b476cea1b7d461d16dda25ca3c7e616e2d15 | affected | ||
3.7 | affected | ||
| … +8 more rows | |||
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2023-53032
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function.
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. When first_ip is 0, last_ip is 0xFFFFFFFF, and netmask is 31, the value of an arithmetic expression 2 << (netmask - mask_bits - 1) is subject to overflow due to a failure casting operands to a larger data type before performing the arithmetic. Note that it's harmless since the value will be checked at the next step. Found by InfoTeCS on behalf of Linux Verification Center (linuxtesting.org) with SVACE.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于bitmap_ip_create存在整数溢出。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2023-53032
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-53032
请登录查看更多情报信息。
Patches & Fixes for CVE-2023-53032 (1)
Same Patch Batch · Linux · 2025-03-27 · 124 CVEs total
| CVE-2023-52983 | block, bfq: fix uaf for bfqq in bic_set_bfqq() | |
| CVE-2023-52999 | net: fix UaF in netns ops registration error path | |
| CVE-2023-52997 | ipv4: prevent potential spectre v1 gadget in ip_metrics_convert() | |
| CVE-2023-52996 | ipv4: prevent potential spectre v1 gadget in fib_metrics_match() | |
| CVE-2023-52995 | riscv/kprobe: Fix instruction simulation of JALR | |
| CVE-2023-52994 | acpi: Fix suspend with Xen PV | |
| CVE-2023-52993 | x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL | |
| CVE-2023-52992 | bpf: Skip task with pid=1 in send_signal_common() | |
| CVE-2023-52991 | net: fix NULL pointer in skb_segment_list | |
| CVE-2023-52989 | firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region | |
| CVE-2023-52988 | ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() | |
| CVE-2023-52987 | ASoC: SOF: ipc4-mtrace: prevent underflow in sof_ipc4_priority_mask_dfs_write() | |
| CVE-2023-52986 | bpf, sockmap: Check for any of tcp_bpf_prots when cloning a listener | |
| CVE-2023-52985 | arm64: dts: imx8mm-verdin: Do not power down eth-phy | |
| CVE-2023-52984 | net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices | |
| CVE-2023-52982 | fscache: Use wait_on_bit() to wait for the freeing of relinquished volume | |
| CVE-2022-49761 | btrfs: always report error in run_one_delayed_ref() | |
| CVE-2022-49760 | mm/hugetlb: fix PTE marker handling in hugetlb_change_protection() | |
| CVE-2022-49759 | VMCI: Use threaded irqs instead of tasklets | |
| CVE-2023-52973 | vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF |
Showing top 20 of 124 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Linux
- CVE-2026-64554
netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragm - CVE-2026-64555
KVM: arm64: nv: Fix SPSR_EL2 restore in kvm_hyp_handle_mops( - CVE-2026-64552
virtio-net: fix len check in receive_big() - CVE-2026-64553
net: psample: fix info leak in PSAMPLE_ATTR_DATA - CVE-2026-64551
sctp: validate STALE_COOKIE cause length before reading stal
Same vendor: Linux
- CVE-2026-64554
netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragm - CVE-2026-64555
KVM: arm64: nv: Fix SPSR_EL2 restore in kvm_hyp_handle_mops( - CVE-2026-64552
virtio-net: fix len check in receive_big() - CVE-2026-64553
net: psample: fix info leak in PSAMPLE_ATTR_DATA - CVE-2026-64551
sctp: validate STALE_COOKIE cause length before reading stal
V. Comments for CVE-2023-53032
No comments yet