1. Home
  2. Vulnerabilities
  3. CVE-2023-53179
0.0
NA
CVE-2023-53179
netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c The missing IP_SET_HASH_WITH_NET0 macro in ip_set_hash_netportnet can lead to the use of wrong `CIDR_POS(c)` for calculating array offsets, which can lead to integer underflow. As a result, it leads to slab out-of-bound access. This patch adds back the IP_SET_HASH_WITH_NET0 macro to ip_set_hash_netportnet to address the issue.

INFO

Published Date :

Sept. 15, 2025, 2:15 p.m.

Last Modified :

Sept. 15, 2025, 3:22 p.m.

Remotely Exploit :

No

Source :

416baaa9-dc9f-4396-8d5f-8c081fb06d67
Affected Products

The following products are affected by CVE-2023-53179 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Linux linux_kernel
: Total Affected Vendor : 1 | Products : 1
Solution
Fix slab out-of-bounds access by applying the missing IP_SET_HASH_WITH_NET0 macro.
  • Apply the patch that adds the missing IP_SET_HASH_WITH_NET0 macro.
  • Ensure ip_set_hash_netportnet uses the correct macro.
  • Update the Linux kernel to the patched version.
References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2023-53179.

URL Resource
https://git.kernel.org/stable/c/050d91c03b28ca479df13dfb02bcd2c60dd6a878
https://git.kernel.org/stable/c/109e830585e89a03d554bf8ad0e668630d0a6260
https://git.kernel.org/stable/c/7935b636dd693dfe4483cfef4a1e91366c8103fa
https://git.kernel.org/stable/c/7ca0706c68adadf86a36b60dca090f5e9481e808
https://git.kernel.org/stable/c/83091f8ac03f118086596f17c9a52d31d6ca94b3
https://git.kernel.org/stable/c/a9e6142e5f8f6ac7d1bca45c1b2b13b084ea9e14
https://git.kernel.org/stable/c/d59b6fc405549f7caf31f6aa5da1d6bef746b166
https://git.kernel.org/stable/c/d95c8420efe684b964e3aa28108e9a354bcd7225
https://git.kernel.org/stable/c/e632d09dffc68b9602d6893a99bfe3001d36cefc
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2023-53179 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2023-53179 weaknesses.

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2023-53179 vulnerability anywhere in the article.

Results are limited to the first 20 news articles due to potential performance issues.

The following table lists the changes that have been made to the CVE-2023-53179 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67

    Sep. 15, 2025

    Action Type Old Value New Value
    Added Description In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c The missing IP_SET_HASH_WITH_NET0 macro in ip_set_hash_netportnet can lead to the use of wrong `CIDR_POS(c)` for calculating array offsets, which can lead to integer underflow. As a result, it leads to slab out-of-bound access. This patch adds back the IP_SET_HASH_WITH_NET0 macro to ip_set_hash_netportnet to address the issue.
    Added Reference https://git.kernel.org/stable/c/050d91c03b28ca479df13dfb02bcd2c60dd6a878
    Added Reference https://git.kernel.org/stable/c/109e830585e89a03d554bf8ad0e668630d0a6260
    Added Reference https://git.kernel.org/stable/c/7935b636dd693dfe4483cfef4a1e91366c8103fa
    Added Reference https://git.kernel.org/stable/c/7ca0706c68adadf86a36b60dca090f5e9481e808
    Added Reference https://git.kernel.org/stable/c/83091f8ac03f118086596f17c9a52d31d6ca94b3
    Added Reference https://git.kernel.org/stable/c/a9e6142e5f8f6ac7d1bca45c1b2b13b084ea9e14
    Added Reference https://git.kernel.org/stable/c/d59b6fc405549f7caf31f6aa5da1d6bef746b166
    Added Reference https://git.kernel.org/stable/c/d95c8420efe684b964e3aa28108e9a354bcd7225
    Added Reference https://git.kernel.org/stable/c/e632d09dffc68b9602d6893a99bfe3001d36cefc
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
Vulnerability Scoring Details
No CVSS metrics available for this vulnerability.