CVE-2024-53141

Summary

CVE-2024-53141 is a vulnerability affecting the Linux kernel's netfilter and ipset components. When the IPSET_ATTR_CIDR attribute exists without IPSET_ATTR_IP_TO, the ip and ip_to values are inadvertently swapped. As a result, a crucial range check for the ip value is overlooked, potentially leading to unintended access or denial of service. To mitigate this issue, the missing range checks must be added, and unnecessary ones removed.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.