Bug 2516470 (CVE-2026-72350) - CVE-2026-72350 kernel: netfilter: xt_u32: reject invalid shift counts
Summary: CVE-2026-72350 kernel: netfilter: xt_u32: reject invalid shift counts
Keywords:
Status: NEW
Alias: CVE-2026-72350
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-08-15 06:14 UTC by OSIDB Bzimport
Modified: 2026-08-19 13:55 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2026-08-15 06:14:14 UTC 
In the Linux kernel, the following vulnerability has been resolved:

netfilter: xt_u32: reject invalid shift counts

u32_match_it() executes rule-supplied shift operands on a 32-bit
value. A malformed u32 rule can provide a shift count of 32 or more,
triggering an undefined shift out-of-bounds during packet evaluation.

Validate XT_U32_LEFTSH and XT_U32_RIGHTSH operands in
u32_mt_checkentry() and reject malformed rules before they reach the
packet path.
Comment 1 Keith Grant 2026-08-19 13:51:30 UTC 
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2026081512-CVE-2026-72350-e1f8@gregkh/T
Note You need to log in before you can comment on or make changes to this bug.