Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_u32: reject invalid shift counts u32_match_it() executes rule-supplied shift operands on a 32-bit value. A malformed u32 rule can provide a shift count of 32 or more, triggering an undefined shift out-of-bounds during packet evaluation. Validate XT_U32_LEFTSH and XT_U32_RIGHTSH operands in u32_mt_checkentry() and reject malformed rules before they reach the packet path.
CVSS 7.8EPSS 0.17600000000000002%Risque 0.79
Voir la source- Publication
- 2026-08-15 06:22:08
- Versions concernées
- unknown
- Type
- Noyau
- Dernière modification
- 2026-08-17 06:18:39
- Vecteur
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H