In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_connmark: reject invalid shift parameters Revision 2 of the CONNMARK target accepts user-controlled shift parameters and applies them to 32-bit mark values in connmark_tg_shift(). A shift_bits value of 32 or more triggers an undefined-shift bug when the rule is evaluated. Invalid shift_dir values are also accepted and silently fall back to the left-shift path. Reject invalid revision-2 shift parameters in connmark_tg_check() so malformed rules fail at installation time, before they can reach the packet path.

Metrics

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00215.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
References
Link Providers
https://git.kernel.org/stable/c/1b47026fb4b35bac850ad6e8a4ad7fc018e09ebc cve-icon cve-icon
https://git.kernel.org/stable/c/230173cc6105bdfb2696d37e6e56687b003fbe63 cve-icon cve-icon
https://git.kernel.org/stable/c/4eef84b09a3836919360c4232b0f16651a155eec cve-icon cve-icon
https://git.kernel.org/stable/c/8ace320ac4416f5e5fbcd065309fb2dfcce787b0 cve-icon cve-icon
https://git.kernel.org/stable/c/9657bb11a6376ab0a79f05d433713d6944111e9d cve-icon cve-icon
https://git.kernel.org/stable/c/c3fa852d117b3fda72265e4230e3967db4a74fcf cve-icon cve-icon
https://git.kernel.org/stable/c/d8ce63d928b457fba7ed1e302492dfd32293671c cve-icon cve-icon
History

Sat, 15 Aug 2026 11:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-20
CWE-680

Sat, 15 Aug 2026 06:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_connmark: reject invalid shift parameters Revision 2 of the CONNMARK target accepts user-controlled shift parameters and applies them to 32-bit mark values in connmark_tg_shift(). A shift_bits value of 32 or more triggers an undefined-shift bug when the rule is evaluated. Invalid shift_dir values are also accepted and silently fall back to the left-shift path. Reject invalid revision-2 shift parameters in connmark_tg_check() so malformed rules fail at installation time, before they can reach the packet path.
Title netfilter: xt_connmark: reject invalid shift parameters
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-15T05:55:51.665Z

Reserved: 2026-08-09T03:40:39.920Z

Link: CVE-2026-72347

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-15T06:22:08.070

Modified: 2026-08-15T06:22:08.070

Link: CVE-2026-72347

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-15T11:00:05Z