)]}'
{
  "commit": "58d3cd4d7459221c42f001549cb9ecf6fd78202f",
  "tree": "db46eddf373da729f9181d31f95a6853de028bc5",
  "parents": [
    "f03e6a6bab451262a053740dee065aeee91b03dc"
  ],
  "author": {
    "name": "Jeongjun Park",
    "email": "aha310510@gmail.com",
    "time": "Wed Nov 13 22:02:09 2024 +0900"
  },
  "committer": {
    "name": "Michael Kochera",
    "email": "kochera@google.com",
    "time": "Thu Jan 16 01:27:01 2025 -0800"
  },
  "message": "netfilter: ipset: add missing range check in bitmap_ip_uadt\n\ncommit 35f56c554eb1b56b77b3cf197a6b00922d49033d upstream.\n\nWhen tb[IPSET_ATTR_IP_TO] is not present but tb[IPSET_ATTR_CIDR] exists,\nthe values of ip and ip_to are slightly swapped. Therefore, the range check\nfor ip should be done later, but this part is missing and it seems that the\nvulnerability occurs.\n\nSo we should add missing range checks and remove unnecessary range checks.\n\nBUG\u003db/381372975\nTEST\u003dpresubmit\nRELEASE_NOTE\u003dFixed KCTF-35f56c5 in the Linux kernel.\n\ncos-patch: security-high\nCc: \u003cstable@vger.kernel.org\u003e\nReported-by: syzbot+58c872f7790a4d2ac951@syzkaller.appspotmail.com\nFixes: 72205fc68bd1 (\"netfilter: ipset: bitmap:ip set type support\")\nChange-Id: Icd9758b0dc20bd70f959e6ec61cca8bd65774320\nSigned-off-by: Jeongjun Park \u003caha310510@gmail.com\u003e\nAcked-by: Jozsef Kadlecsik \u003ckadlec@blackhole.kfki.hu\u003e\nSigned-off-by: Pablo Neira Ayuso \u003cpablo@netfilter.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\nSigned-off-by: Kernel CVE Triage Automation \u003ccloud-image-kernel-cve-triage-automation@prod.google.com\u003e\nReviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/90782\nTested-by: Cusky Presubmit Bot \u003cpresubmit@cos-infra-prod.iam.gserviceaccount.com\u003e\nReviewed-by: Michael Kochera \u003ckochera@google.com\u003e\nReviewed-by: Kevin Berry \u003ckpberry@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "e4fa00abde6a2ab9941c8cd7d0b8a12f537503e0",
      "old_mode": 33188,
      "old_path": "net/netfilter/ipset/ip_set_bitmap_ip.c",
      "new_id": "5988b9bb9029dc1ac6e3c88d79c9d74442e00ac4",
      "new_mode": 33188,
      "new_path": "net/netfilter/ipset/ip_set_bitmap_ip.c"
    }
  ]
}