CVE-2023-53179

netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c

State: Published
Severity: 7.8 High
Published: Sep 15, 2025
Updated: Oct 15, 2026
Reserved: Sep 15, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c

The missing IP_SET_HASH_WITH_NET0 macro in ip_set_hash_netportnet can lead to the use of wrong `CIDR_POS(c)` for calculating array offsets, which can lead to integer underflow. As a result, it leads to slab out-of-bound access. This patch adds back the IP_SET_HASH_WITH_NET0 macro to ip_set_hash_netportnet to address the issue.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	0d5d0b5c41f766355f2b42c47d13ea001f754c7d to before 7935b636dd693dfe4483cfef4a1e91366c8103faAffected cb3e590df429ce151d5041884a4947099b8ad6a7 to before e632d09dffc68b9602d6893a99bfe3001d36cefcAffected 886503f34d63e681662057448819edb5b1057a97 to before 109e830585e89a03d554bf8ad0e668630d0a6260Affected 886503f34d63e681662057448819edb5b1057a97 to before 83091f8ac03f118086596f17c9a52d31d6ca94b3Affected 886503f34d63e681662057448819edb5b1057a97 to before a9e6142e5f8f6ac7d1bca45c1b2b13b084ea9e14Affected 886503f34d63e681662057448819edb5b1057a97 to before 7ca0706c68adadf86a36b60dca090f5e9481e808Affected 886503f34d63e681662057448819edb5b1057a97 to before d59b6fc405549f7caf31f6aa5da1d6bef746b166Affected 886503f34d63e681662057448819edb5b1057a97 to before d95c8420efe684b964e3aa28108e9a354bcd7225Affected 886503f34d63e681662057448819edb5b1057a97 to before 050d91c03b28ca479df13dfb02bcd2c60dd6a878Affected 186642845b02e1a7944ef33c3a3ac41eba77517fAffected 919560afc21f91ca352a20394d5249aba1799690Affected 4.14.84 to before 4.14.326Affected 4.19.5 to before 4.19.295Affected 4.4.165 to before 4.5Affected 4.9.141 to before 4.10Affected
LinuxLinux	4.20Affected before 4.20Not affected 4.14.326 through 4.14.Not affected 4.19.295 through 4.19.Not affected 5.4.257 through 5.4.Not affected 5.10.195 through 5.10.Not affected 5.15.132 through 5.15.Not affected 6.1.53 through 6.1.Not affected 6.4.16 through 6.4.Not affected 6.5.3 through 6.5.Not affected 6.6 and laterNot affected

Product

Versions

LinuxLinux

0d5d0b5c41f766355f2b42c47d13ea001f754c7d to before 7935b636dd693dfe4483cfef4a1e91366c8103faAffected
cb3e590df429ce151d5041884a4947099b8ad6a7 to before e632d09dffc68b9602d6893a99bfe3001d36cefcAffected
886503f34d63e681662057448819edb5b1057a97 to before 109e830585e89a03d554bf8ad0e668630d0a6260Affected
886503f34d63e681662057448819edb5b1057a97 to before 83091f8ac03f118086596f17c9a52d31d6ca94b3Affected
886503f34d63e681662057448819edb5b1057a97 to before a9e6142e5f8f6ac7d1bca45c1b2b13b084ea9e14Affected
886503f34d63e681662057448819edb5b1057a97 to before 7ca0706c68adadf86a36b60dca090f5e9481e808Affected
886503f34d63e681662057448819edb5b1057a97 to before d59b6fc405549f7caf31f6aa5da1d6bef746b166Affected
886503f34d63e681662057448819edb5b1057a97 to before d95c8420efe684b964e3aa28108e9a354bcd7225Affected
886503f34d63e681662057448819edb5b1057a97 to before 050d91c03b28ca479df13dfb02bcd2c60dd6a878Affected
186642845b02e1a7944ef33c3a3ac41eba77517fAffected
919560afc21f91ca352a20394d5249aba1799690Affected
4.14.84 to before 4.14.326Affected
4.19.5 to before 4.19.295Affected
4.4.165 to before 4.5Affected
4.9.141 to before 4.10Affected

LinuxLinux

4.20Affected
before 4.20Not affected
4.14.326 through 4.14.*Not affected
4.19.295 through 4.19.*Not affected
5.4.257 through 5.4.*Not affected
5.10.195 through 5.10.*Not affected
5.15.132 through 5.15.*Not affected
6.1.53 through 6.1.*Not affected
6.4.16 through 6.4.*Not affected
6.5.3 through 6.5.*Not affected
6.6 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.