CVE-2026-46101

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the netfilter component within the nft bitwise function. The carry propagation logic calculates the carry from the adjacent 32-bit word using BITS PER TYPE(u32) - shift. When a zero shift operand is used in left or right shift expressions, it results in a 32-bit shift, which leads to undefined behaviour. This issue occurs during the initialization of malformed rules.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.