Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-72350

netfilter: xt_u32: reject invalid shift counts

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_u32: reject invalid shift counts u32_match_it() executes rule-supplied shift operands on a 32-bit value. A malformed u32 rule can provide a shift count of 32 or more, triggering an undefined shift out-of-bounds during packet evaluation. Validate XT_U32_LEFTSH and XT_U32_RIGHTSH operands in u32_mt_checkentry() and reject malformed rules before they reach the packet path.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 1b50b8a371e90a5e110f466e4ac02cf6b5f681de to < ca7c92d9701249e6daf132087756a88cbf2bb2a3affected
  • 1b50b8a371e90a5e110f466e4ac02cf6b5f681de to < b33b44250d57ab0e5a1e2571b5285fb0d0a7f382affected
  • 1b50b8a371e90a5e110f466e4ac02cf6b5f681de to < 728f479dc0447ae7eaef87926ff49142e415a811affected
  • 1b50b8a371e90a5e110f466e4ac02cf6b5f681de to < 0a8b7a6d763775709c601f584e709ae48bcc000aaffected
  • 1b50b8a371e90a5e110f466e4ac02cf6b5f681de to < cce42014415cecd98aa49b3950e7b02ee7c81268affected
  • 1b50b8a371e90a5e110f466e4ac02cf6b5f681de to < a597a722fb71a534138c20359b655726622b5f17affected
  • 1b50b8a371e90a5e110f466e4ac02cf6b5f681de to < 00d034fe8230dfc5832fe011ff2d81c1a2cc7a29affected
  • 1b50b8a371e90a5e110f466e4ac02cf6b5f681de to < 64cdf7d30ac18e43df6c48004435febb965809a8affected

Linux Linux

Default version status: affected

  • 2.6.23affected
  • 0 to < 2.6.23unaffected
  • 5.10.261 to ≤ 5.10.*unaffected
  • 5.15.212 to ≤ 5.15.*unaffected
  • 6.1.178 to ≤ 6.1.*unaffected
  • 6.6.145 to ≤ 6.6.*unaffected
  • 6.12.97 to ≤ 6.12.*unaffected
  • 6.18.40 to ≤ 6.18.*unaffected
  • 7.1.5 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References