{"cve":"CVE-2024-53141","nvd":{"published":"2024-12-06T10:15:06.050","modified":"2026-10-15T22:18:00.690","status":"Modified","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ipset: add missing range check in bitmap_ip_uadt\n\nWhen tb[IPSET_ATTR_IP_TO] is not present but tb[IPSET_ATTR_CIDR] exists,\nthe values of ip and ip_to are slightly swapped. Therefore, the range check\nfor ip should be done later, but this part is missing and it seems that the\nvulnerability occurs.\n\nSo we should add missing range checks and remove unnecessary range checks.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":7.8},"cwes":[],"references":["https://git.kernel.org/stable/c/15794835378ed56fb9bacc6a5dd3b9f33520604e","https://git.kernel.org/stable/c/2e151b8ca31607d14fddc4ad0f14da0893e1a7c7","https://git.kernel.org/stable/c/35f56c554eb1b56b77b3cf197a6b00922d49033d","https://git.kernel.org/stable/c/3c20b5948f119ae61ee35ad8584d666020c91581","https://git.kernel.org/stable/c/591efa494a1cf649f50a35def649c43ae984cd03"],"products":["linux:linux_kernel"],"source":"nvd","synced_at":"2026-10-19T21:57:36.180738747+00:00"},"epss":{"cve":"CVE-2024-53141","score":0.00396,"percentile":0.33542,"date":"2026-10-25"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}