Executive Summary

This vulnerability exists in the Linux kernel's netfilter ipset feature, specifically in certain hash set variants that iterate over IPv4 address ranges using a 32-bit iterator.

The problem occurs because the iterator does not stop correctly after processing the last address in the requested range. If the iterator advances once more beyond the end, it can cause the traversal state to move past the intended boundary.

As a result, a later retry of the iteration may continue from an unintended position, potentially causing unexpected behavior.

The fix involves explicitly handling the iterator increment at the end of the loop and stopping once the upper bound has been processed, preventing traversal beyond the original boundary while maintaining valid retry behavior.

Useful 0 Not Useful 0