CVE-2026-72350

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the netfilter xt u32 module where the u32 match it() function executes shift operands provided by a rule on a 32-bit value. A malformed u32 rule can specify a shift count of 32 or more, which triggers an undefined shift out-of-bounds during packet evaluation. This occurs because the XT U32 LEFTSH and XT U32 RIGHTSH operands are not properly validated in the u32 mt checkentry() function before reaching the packet path.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.