In the Linux kernel, the following vulnerability has been resolved:
netfilter: ipset: add missing range check in bitmap_ip_uadt
When tb[IPSET_ATTR_IP_TO] is not present but tb[IPSET_ATTR_CIDR] exists, the values of ip and ip_to are slightly swapped. Therefore, the range check for ip should be done later, but this part is missing and it seems that the vulnerability occurs.
So we should add missing range checks and remove unnecessary range checks.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debugUpgrade kernel-headersUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-coreUpgrade kernelUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-cross-headersUpgrade kernel-rt-modules-extraUpgrade kernel-rt-coreUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-coreUpgrade kernel-tools-libsUpgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-docUpgrade kernel-rt-debugUpgrade kernel-toolsUpgrade perfUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade bpftoolUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modulesUpgrade python3-perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-core | May 20, 2025 | Dec 6, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-develUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.176-118.170Upgrade kernel-livepatch-5.10.233-223.887Upgrade perfUpgrade python-perf-debuginfo | Mar 14, 2025 | Dec 6, 2024 |
| Amazon_linux_2023 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-libbpf-staticUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade perf-debuginfoUpgrade kernel-livepatch-6.1.124-134.200Upgrade kernel-modules-extra-commonUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-headers | Mar 27, 2025 | Dec 6, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jan 13, 2025 | Dec 6, 2024 |
| Dell Powerstore Dsa2025429 | — | Upgrade Dell PowerStoreOS to the latest version | Dec 3, 2025 | Dec 2, 2025 |
| Dell Powerstore Dsa2026039 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Jan 6, 2026 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Mar 18, 2025 | Dec 6, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perf | Feb 11, 2025 | Dec 6, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perf | Mar 19, 2025 | Dec 6, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Mar 18, 2025 | Dec 6, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Feb 10, 2025 | Dec 6, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | May 15, 2025 | Dec 6, 2024 |
| Ubuntu | — | Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-oem-22.04bUpgrade linux-image-4.15.0-1177-awsUpgrade linux-image-oracle-64kUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-4.4.0-263-genericUpgrade linux-image-5.15.0-1033-nvidia-tegra-rtUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1142-gcpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1079-azureUpgrade linux-image-gcpUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1017-gkeUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1069-ibmUpgrade linux-image-ibmUpgrade linux-image-intelUpgrade linux-image-lowlatency-64kUpgrade linux-image-3.13.0-202-genericUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-6.8.0-1018-raspiUpgrade linux-image-aws-hweUpgrade linux-image-6.8.0-52-genericUpgrade linux-image-6.8.0-1020-oemUpgrade linux-image-6.8.0-52-generic-64kUpgrade linux-image-5.15.0-1071-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-131-genericUpgrade linux-image-5.15.0-1071-nvidiaUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-4.4.0-263-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-5.4.0-1143-azureUpgrade linux-image-azure-nvidiaUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-generic-64kUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-5.15.0-1021-nvidia-tegra-igxUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1185-azureUpgrade linux-image-5.15.0-1033-nvidia-tegraUpgrade linux-image-5.15.0-131-lowlatencyUpgrade linux-image-azureUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-5.15.0-1021-nvidia-tegra-igx-rtUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-3.13.0-202-lowlatencyUpgrade linux-image-4.15.0-233-genericUpgrade linux-image-5.4.0-1058-xilinx-zynqmpUpgrade linux-image-5.15.0-1072-intel-iotgUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-raspiUpgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-1023-awsUpgrade linux-image-gkeopUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-ibm-classicUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1074-oracleUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.4.0-1122-raspiUpgrade linux-image-5.4.0-205-genericUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1085-ibmUpgrade linux-image-5.4.0-1137-oracleUpgrade linux-image-5.15.0-1075-gcpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1019-ibmUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-oemUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1071-nvidia-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-oem-osp1Upgrade linux-image-6.8.0-1021-nvidiaUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-5.4.0-205-generic-lpaeUpgrade linux-image-5.4.0-1098-bluefieldUpgrade linux-image-6.8.0-1019-oracle-64kUpgrade linux-image-6.8.0-52-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-realtimeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-bluefieldUpgrade linux-image-4.15.0-233-lowlatencyUpgrade linux-image-6.8.0-1021-nvidia-lowlatencyUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-lts-trustyUpgrade linux-image-nvidia-64kUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1078-awsUpgrade linux-image-6.8.0-1021-gcpUpgrade linux-image-5.15.0-1073-kvmUpgrade linux-image-6.8.0-52-lowlatency-64kUpgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-205-lowlatencyUpgrade linux-image-6.8.0-1021-azure-fdeUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-gkeUpgrade linux-image-oracle-edgeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-5.15.0-131-generic-64kUpgrade linux-image-4.15.0-1160-kvmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-4.15.0-1170-gcpUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-6.8.0-1021-azureUpgrade linux-image-5.4.0-1126-kvmUpgrade linux-image-4.4.0-1140-awsUpgrade linux-image-6.8.0-1021-nvidia-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-131-lowlatency-64kUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1059-gkeopUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-6.8.0-1019-oracleUpgrade linux-image-azure-lts-18.04Upgrade linux-image-serverUpgrade linux-image-oem-24.04aUpgrade linux-image-awsUpgrade linux-image-5.4.0-1139-awsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.4.0-1048-iotUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1073-gkeUpgrade linux-image-5.15.0-1044-xilinx-zynqmpUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-131-generic-lpaeUpgrade linux-image-4.4.0-1141-kvmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1021-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1004-gkeopUpgrade linux-image-4.15.0-1139-oracleUpgrade linux-image-4.4.0-1178-awsUpgrade linux-image-5.15.0-1077-awsUpgrade linux-image-lowlatency-lts-xenial | Jan 30, 2025 | Dec 6, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 6, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub