Linux Kernel Netfilter ipset Bitmap Overflow Vulnerability

A vulnerability in the Linux kernel's netfilter component, specifically within the ipset feature, has been addressed. The issue was an arithmetic overflow in the bitmap_ip_create() function, which could occur when the first_ip is 0, the last_ip is 0xFFFFFFFF, and the netmask is 31. In this scenario, the calculation of an expression was prone to overflow because the operands were not properly cast to a larger data type before the arithmetic operation. Although this overflow was ultimately harmless, as the resulting value was verified in the subsequent step, it still represented a potential flaw that needed correction.

Impact

The vulnerability could lead to an arithmetic overflow, allowing for unexpected behavior or manipulation of data within the ipset feature of netfilter.