In the Linux kernel, the following vulnerability has been resolved:
netfilter: ipset: add missing range check in bitmap_ip_uadt
When tb[IPSET_ATTR_IP_TO] is not present but tb[IPSET_ATTR_CIDR] exists, the values of ip and ip_to are slightly swapped. Therefore, the range check for ip should be done later, but this part is missing and it seems that the vulnerability occurs.
So we should add missing range checks and remove unnecessary range checks.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-coreUpgrade kernel-coreUpgrade kernel-zfcpdump-develUpgrade kernel-debug-modules-extraUpgrade kernel-debugUpgrade kernelUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libsUpgrade kernel-modules-extraUpgrade kernel-cross-headersUpgrade kernel-headersUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-develUpgrade bpftoolUpgrade kernel-zfcpdumpUpgrade perfUpgrade kernel-zfcpdump-coreUpgrade kernel-rtUpgrade kernel-rt-debugUpgrade kernel-tools-libs-develUpgrade kernel-rt-modulesUpgrade python3-perfUpgrade kernel-rt-develUpgrade kernel-rt-debug-modulesUpgrade kernel-docUpgrade kernel-tools | May 20, 2025 | Dec 6, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-5.15.176-118.170Upgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.233-223.887Upgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-develUpgrade python-perfUpgrade kernel | Mar 14, 2025 | Dec 6, 2024 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-develUpgrade kernel-livepatch-6.1.124-134.200Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade kernel-libbpfUpgrade kernel-libbpf-staticUpgrade perfUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-debuginfo | Mar 27, 2025 | Dec 6, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jan 13, 2025 | Dec 6, 2024 |
| Dell Powerstore Dsa2025429 | — | Upgrade Dell PowerStoreOS to the latest version | Dec 3, 2025 | Dec 2, 2025 |
| Dell Powerstore Dsa2026039 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jan 6, 2026 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Mar 18, 2025 | Dec 6, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelists | Feb 11, 2025 | Dec 6, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Mar 19, 2025 | Dec 6, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Mar 18, 2025 | Dec 6, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Feb 10, 2025 | Dec 6, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | May 15, 2025 | Dec 6, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.11.0-18-genericUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-5.15.0-1075-gcpUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1079-azureUpgrade linux-image-gkeop-6.8Upgrade linux-image-azureUpgrade linux-image-5.15.0-1071-nvidiaUpgrade linux-image-4.4.0-263-lowlatencyUpgrade linux-image-genericUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-5.4.0-1137-oracleUpgrade linux-image-3.13.0-202-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-raspiUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-5.4.0-1143-azureUpgrade linux-image-nvidia-tegraUpgrade linux-image-gkeopUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-5.15.0-131-lowlatencyUpgrade linux-image-5.15.0-1074-oracleUpgrade linux-image-4.15.0-1185-azureUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1085-ibmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-205-genericUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1023-awsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.4.0-1058-xilinx-zynqmpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1122-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-4.15.0-233-genericUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-4.15.0-1177-awsUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-ibm-classicUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-nvidiaUpgrade linux-image-raspi2Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1072-intel-iotgUpgrade linux-image-6.8.0-1017-gkeUpgrade linux-image-6.8.0-1018-raspiUpgrade linux-image-5.4.0-1142-gcpUpgrade linux-image-6.8.0-52-genericUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-3.13.0-202-genericUpgrade linux-image-5.15.0-1069-ibmUpgrade linux-image-6.8.0-52-generic-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1071-raspiUpgrade linux-image-aws-hweUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-131-genericUpgrade linux-image-6.8.0-1020-oemUpgrade linux-image-ibmUpgrade linux-image-oem-22.04cUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-4.4.0-263-genericUpgrade linux-image-intelUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-5.15.0-1071-nvidia-lowlatencyUpgrade linux-image-6.8.0-1004-gkeopUpgrade linux-image-4.15.0-1139-oracleUpgrade linux-image-awsUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.4.0-1098-bluefieldUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-6.8.0-1021-nvidia-lowlatency-64kUpgrade linux-image-4.4.0-1178-awsUpgrade linux-image-4.4.0-1141-kvmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-aws-lts-18.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-5.4.0-1139-awsUpgrade linux-image-intel-iotgUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-5.15.0-1078-awsUpgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-205-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1021-azure-fdeUpgrade linux-image-6.8.0-1021-gcpUpgrade linux-image-5.15.0-1073-kvmUpgrade linux-image-6.8.0-52-lowlatency-64kUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1021-nvidia-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1077-awsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1019-ibmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-oemUpgrade linux-image-5.15.0-131-lowlatency-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-205-generic-lpaeUpgrade linux-image-6.8.0-1019-oracleUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-24.04aUpgrade linux-image-oem-20.04Upgrade linux-image-oracleUpgrade linux-image-bluefieldUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1019-oracle-64kUpgrade linux-image-generic-lts-trustyUpgrade linux-image-oem-24.04Upgrade linux-image-4.15.0-1160-kvmUpgrade linux-image-oem-24.04bUpgrade linux-image-oracle-edgeUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-131-generic-64kUpgrade linux-image-4.15.0-1170-gcpUpgrade linux-image-6.8.0-1021-azureUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-4.4.0-1140-awsUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-131-generic-lpaeUpgrade linux-image-5.4.0-1126-kvmUpgrade linux-image-6.8.0-1021-nvidia-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-realtimeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-5.4.0-1048-iotUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-4.15.0-233-lowlatencyUpgrade linux-image-5.15.0-1073-gkeUpgrade linux-image-nvidia-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-serverUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1059-gkeopUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.8.0-52-lowlatencyUpgrade linux-image-oem-osp1Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1021-nvidia | Jan 30, 2025 | Dec 6, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 6, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub