Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2024-53141

27
FAUCET Score

CVE-2024-53141 is a high-severity vulnerability in the Linux kernel's netfilter ipset component, specifically within the bitmap_ip_uadt function. It arises from a missing range check when handling IP address ranges, potentially leading to an out-of-bounds write due to swapped ip and ip_to values. With a CVSS score of 7.8, this local vulnerability allows an attacker with low privileges to achieve high confidentiality, integrity, and availability impacts. Currently, there is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
>= 2.6.39, < 4.19.325CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 4.20, < 6.6.64CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.7, < 6.11.11CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.12, < 6.12.2CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

7.8HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
1.8
Impact Score
5.9
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.40%
Probability of exploitation in next 30 days
EPSS Percentile
32.3%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.0040 is in the 72nd percentile among its peer group of 17,070 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (42)

autodeskpatch availablevia llm_extracted
View patch
chainsafepatch availablevia llm_extracted
View patch
coollabspatch availablevia llm_extracted
View patch
falcopatch availablevia llm_extracted
View patch
freepbxpatch availablevia llm_extracted
View patch
honeywellpatch availablevia llm_extracted
View patch
microsoftpatch availablevia msrc
Product: azl3 kernel 6.6.64.2-1 on Azure Linux 3.0Fixed in: 6.6.64.2-1
microsoftpatch availablevia msrc
Product: cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0
microsoftpatch availablevia msrc
Product: azl3 kernel 6.6.57.1-7 on Azure Linux 3.0Fixed in: 6.6.64.2-1
microsoftpatch availablevia msrc
Product: 17110-16823Fixed in: 5.15.176.3-1
microsoftpatch availablevia msrc
Product: 17489-17084Fixed in: 6.6.64.2-1
microsoftpatch availablevia msrc
Product: 17088-17084Fixed in: 6.6.64.2-1
microsoftpatch availablevia msrc
Product: 19673-17086
microsoftpatch availablevia msrc
Product: cbl2 kernel 5.15.176.3-1 on CBL Mariner 2.0Fixed in: 5.15.176.3-1
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.6 Update Services for SAP SolutionsFixed in: kernel-0:4.18.0-372.145.1.el8_6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.6 Update Services for SAP SolutionsFixed in: kpatch-patch
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.8 Extended Update SupportFixed in: kernel-0:4.18.0-477.97.1.el8_8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.8 Extended Update SupportFixed in: kpatch-patch
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: kernel-0:5.14.0-570.12.1.el9_6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.0 Update Services for SAP SolutionsFixed in: kernel-0:5.14.0-70.132.1.el9_0
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.0 Update Services for SAP SolutionsFixed in: kernel-rt-0:5.14.0-70.132.1.rt21.204.el9_0
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.0 Update Services for SAP SolutionsFixed in: kpatch-patch
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.2 Extended Update SupportFixed in: kernel-0:5.14.0-284.116.1.el9_2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.2 Extended Update SupportFixed in: kernel-rt-0:5.14.0-284.116.1.rt14.401.el9_2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.2 Extended Update SupportFixed in: kpatch-patch
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.4 Extended Update SupportFixed in: kernel-0:5.14.0-427.68.1.el9_4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7.7 Advanced Update SupportFixed in: kernel-0:3.10.0-1062.98.1.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9.4 Extended Update SupportFixed in: kpatch-patch
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7 Extended Lifecycle SupportFixed in: kernel-rt-0:3.10.0-1160.135.1.rt56.1287.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 7 Extended Lifecycle SupportFixed in: kernel-0:3.10.0-1160.135.1.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: kernel-rt-0:4.18.0-553.52.1.rt7.393.el8_10
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: kernel-0:4.18.0-553.52.1.el8_10
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: kpatch-patch
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.2 Advanced Update SupportFixed in: kernel-0:4.18.0-193.152.1.el8_2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update SupportFixed in: kernel-0:4.18.0-305.157.1.el8_4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Telecommunications Update ServiceFixed in: kernel-rt-0:4.18.0-305.157.1.rt7.234.el8_4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Telecommunications Update ServiceFixed in: kernel-0:4.18.0-305.157.1.el8_4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Update Services for SAP SolutionsFixed in: kernel-0:4.18.0-305.157.1.el8_4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.4 Update Services for SAP SolutionsFixed in: kpatch-patch
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update SupportFixed in: kernel-0:4.18.0-372.145.1.el8_6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8.6 Telecommunications Update ServiceFixed in: kernel-0:4.18.0-372.145.1.el8_6
View patch
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: kernel-rt

Vendor Advisories (8)

autodeskllm-autodesk-c365b674a2ff5a3aCRITICAL

HP ThinPro 8.1 SP8 Security Updates

Oct 27, 2025
freepbxllm-freepbx-e54908c7967265f6CRITICAL

HP ThinPro 8.1 SP8 Security Updates

Oct 27, 2025
honeywellllm-honeywell-c82b5cfda9df97a3CRITICAL

HP ThinPro 8.1 SP8 Security Updates

Oct 27, 2025
falcollm-falco-633402f2722c3f9fHIGH

Linux kernel privilege escalation on Container-Optimized OS and Ubuntu nodes

Apr 10, 2025
chainsafellm-chainsafe-0f34e1daf48bd4aaHIGH

Linux Kernel Privilege Escalation on Container-Optimized OS and Ubuntu nodes (CVE-2024-53141)

Apr 10, 2025
coollabsllm-coollabs-0be5bd5c63a22d8fHIGH

Linux kernel privilege escalation on Container-Optimized OS and Ubuntu nodes (CVE-2024-53141)

Apr 10, 2025
microsoft2024-Dec/CVE-2024-53141Important

netfilter: ipset: add missing range check in bitmap_ip_uadt

Dec 10, 2024
redhatCVE-2024-53141Important

kernel: netfilter: ipset: add missing range check in bitmap_ip_uadt

Dec 6, 2024

References

git.kernel.org / stable/c/15794835378ed56fb9bacc6a5dd3b9f33520604e
Patch
git.kernel.org / stable/c/2e151b8ca31607d14fddc4ad0f14da0893e1a7c7
git.kernel.org / stable/c/35f56c554eb1b56b77b3cf197a6b00922d49033d
Patch
git.kernel.org / stable/c/3c20b5948f119ae61ee35ad8584d666020c91581
Patch
git.kernel.org / stable/c/591efa494a1cf649f50a35def649c43ae984cd03
Patch
git.kernel.org / stable/c/78b0f2028f1043227a8eb0c41944027fc6a04596
git.kernel.org / stable/c/7ffef5e5d5eeecd9687204a5ec2d863752aafb7e
git.kernel.org / stable/c/856023ef032d824309abd5c747241dffa33aae8c
Patch
git.kernel.org / stable/c/e67471437ae9083fa73fa67eee1573fec1b7c8cf
lists.debian.org / debian-lts-announce/2025/03/msg00001.html
lists.debian.org / debian-lts-announce/2025/03/msg00002.html