High 7.8Published Sep 15, 2025

CVE-2023-53179netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c

Updated under an hour ago (Oct 27, 2026, 6:23 AM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c The missing IP_SET_HASH_WITH_NET0 macro in ip_set_hash_netportnet can lead to the use of wrong `CIDR_POS(c)` for calculating array offsets, which can lead to integer underflow. As a result, it leads to slab out-of-bound access. This patch adds back the IP_SET_HASH_WITH_NET0 macro to ip_set_hash_netportnet to address the issue.

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 15, 2026
First seen by InfoSec Signals: Oct 15, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 0d5d0b5c41f766355f2b42c47d13ea001f754c7d before 7935b636dd693dfe4483cfef4a1e91366c8103fa; from cb3e590df429ce151d5041884a4947099b8ad6a7 before e632d09dffc68b9602d6893a99bfe3001d36cefc; 886503f34d63e681662057448819edb5b1057a97 builds before 109e830585e89a03d554bf8ad0e668630d0a6260; 886503f34d63e681662057448819edb5b1057a97 builds before 83091f8ac03f118086596f17c9a52d31d6ca94b3; from 886503f34d63e681662057448819edb5b1057a97 before a9e6142e5f8f6ac7d1bca45c1b2b13b084ea9e14; 886503f34d63e681662057448819edb5b1057a97 builds before 7ca0706c68adadf86a36b60dca090f5e9481e808; from 886503f34d63e681662057448819edb5b1057a97 before d59b6fc405549f7caf31f6aa5da1d6bef746b166; from 886503f34d63e681662057448819edb5b1057a97 before d95c8420efe684b964e3aa28108e9a354bcd7225; and 7 more ranges	CNA record
linux linux_kernel linux:linux_kernel	from 4.4.165 before 4.5; from 4.9.141 before 4.10; from 4.14.84 before 4.14.326; from 4.19.5 before 4.19.295; from 4.20.1 before 5.4.257; from 5.5 before 5.10.195; from 5.11 before 5.15.132; from 5.16 before 6.1.53; and 9 more ranges	NVD

References

References

https://git.kernel.org/stable/c/7935b636dd693dfe4483cfef4a1e91366c8103fa	patch
https://git.kernel.org/stable/c/e632d09dffc68b9602d6893a99bfe3001d36cefc	patch
https://git.kernel.org/stable/c/109e830585e89a03d554bf8ad0e668630d0a6260	patch
https://git.kernel.org/stable/c/83091f8ac03f118086596f17c9a52d31d6ca94b3	patch
https://git.kernel.org/stable/c/a9e6142e5f8f6ac7d1bca45c1b2b13b084ea9e14	patch
https://git.kernel.org/stable/c/7ca0706c68adadf86a36b60dca090f5e9481e808	patch
https://git.kernel.org/stable/c/d59b6fc405549f7caf31f6aa5da1d6bef746b166	patch
https://git.kernel.org/stable/c/d95c8420efe684b964e3aa28108e9a354bcd7225	patch
https://git.kernel.org/stable/c/050d91c03b28ca479df13dfb02bcd2c60dd6a878	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.