In the Linux kernel, the following vulnerability has been resolved:
netfilter: ipset: add missing range check in bitmap_ip_uadt
When tb[IPSET_ATTR_IP_TO] is not present but tb[IPSET_ATTR_CIDR] exists, the values of ip and ip_to are slightly swapped. Therefore, the range check for ip should be done later, but this part is missing and it seems that the vulnerability occurs.
So we should add missing range checks and remove unnecessary range checks.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-cross-headersUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-develUpgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade kernel-coreUpgrade kernel-debug-develUpgrade kernel-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-develUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-rt-modules-extraUpgrade kernel-headersUpgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade kernel-rt-modulesUpgrade kernel-rt-develUpgrade python3-perfUpgrade kernel-zfcpdump-coreUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade perfUpgrade kernel-rt-debugUpgrade kernel-docUpgrade kernel-rt-debug-modules | May 20, 2025 | Dec 6, 2024 |
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.10.233-223.887Upgrade perf-debuginfoUpgrade kernel-livepatch-5.15.176-118.170Upgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-develUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade bpftool | Mar 14, 2025 | Dec 6, 2024 |
| Amazon_linux_2023 | — | Upgrade perfUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-livepatch-6.1.124-134.200Upgrade kernel-debuginfo-common-x86_64 | Mar 27, 2025 | Dec 6, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jan 13, 2025 | Dec 6, 2024 |
| Dell Powerstore Dsa2025429 | — | Upgrade Dell PowerStoreOS to the latest version | Dec 3, 2025 | Dec 2, 2025 |
| Dell Powerstore Dsa2026039 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jan 6, 2026 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libs | Mar 18, 2025 | Dec 6, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libs | Feb 11, 2025 | Dec 6, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftool | Mar 19, 2025 | Dec 6, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Mar 18, 2025 | Dec 6, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Feb 10, 2025 | Dec 6, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | May 15, 2025 | Dec 6, 2024 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1137-oracleUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1074-oracleUpgrade linux-image-4.15.0-1177-awsUpgrade linux-image-4.15.0-1185-azureUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-5.15.0-1072-intel-iotgUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-tegraUpgrade linux-image-raspiUpgrade linux-image-3.13.0-202-lowlatencyUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-263-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-131-lowlatencyUpgrade linux-image-azure-nvidiaUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-azureUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-genericUpgrade linux-image-5.15.0-1071-nvidiaUpgrade linux-image-6.8.0-1017-gkeUpgrade linux-image-aws-hweUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1071-raspiUpgrade linux-image-6.8.0-1018-raspiUpgrade linux-image-4.4.0-263-genericUpgrade linux-image-oracle-64kUpgrade linux-image-ibmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-intelUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-3.13.0-202-genericUpgrade linux-image-5.4.0-205-genericUpgrade linux-image-6.8.0-52-genericUpgrade linux-image-5.15.0-1069-ibmUpgrade linux-image-5.4.0-1142-gcpUpgrade linux-image-oem-20.04bUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-5.15.0-131-genericUpgrade linux-image-6.8.0-52-generic-64kUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-5.15.0-1079-azureUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-5.15.0-1075-gcpUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-gke-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1085-ibmUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-4.15.0-233-genericUpgrade linux-image-6.8.0-1020-oemUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-gkeopUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-raspi2Upgrade linux-image-6.11.0-1015-oemUpgrade linux-image-gcpUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-5.4.0-1122-raspiUpgrade linux-image-5.4.0-1143-azureUpgrade linux-image-5.4.0-1058-xilinx-zynqmpUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1023-awsUpgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-ibm-classicUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-6.8.0-1021-nvidiaUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.4.0-205-lowlatencyUpgrade linux-image-5.15.0-1078-awsUpgrade linux-image-6.8.0-1021-azure-fdeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-6.8.0-1019-oracleUpgrade linux-image-4.15.0-1170-gcpUpgrade linux-image-4.15.0-1160-kvmUpgrade linux-image-5.4.0-1126-kvmUpgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-52-lowlatency-64kUpgrade linux-image-generic-lts-trustyUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oemUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1021-nvidia-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-1019-ibmUpgrade linux-image-5.15.0-131-lowlatency-64kUpgrade linux-image-5.15.0-1077-awsUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-205-generic-lpaeUpgrade linux-image-5.15.0-1059-gkeopUpgrade linux-image-6.8.0-1019-oracle-64kUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-bluefieldUpgrade linux-image-6.8.0-52-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1098-bluefieldUpgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1021-gcpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1021-azureUpgrade linux-image-5.15.0-131-generic-64kUpgrade linux-image-oem-24.04Upgrade linux-image-oracle-edgeUpgrade linux-image-gkeUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-kvmUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-6.8.0-1021-nvidia-lowlatencyUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-5.15.0-131-generic-lpaeUpgrade linux-image-5.15.0-1073-gkeUpgrade linux-image-4.15.0-233-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-realtimeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-virtualUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1139-awsUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-serverUpgrade linux-image-intel-iotgUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-6.8Upgrade linux-image-4.4.0-1140-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-4.4.0-1178-awsUpgrade linux-image-6.8.0-1004-gkeopUpgrade linux-image-4.4.0-1141-kvmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1071-nvidia-lowlatencyUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-6.8.0-1021-nvidia-lowlatency-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1073-kvmUpgrade linux-image-4.15.0-1139-oracle | Jan 30, 2025 | Dec 6, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 6, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub