In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_u32: reject invalid shift counts u32_match_it() execu…
CVE-2026-72350 · published 15 Aug 2026
How serious is it
- Severity: high, CVSS score 7.8 out of 10.
- No exploit prediction (EPSS) score yet.
- Not on the CISA list of exploited vulnerabilities.
- No public exploit in Exploit-DB.
Is your app affected by CVE-2026-72350?
Paste this prompt into Claude Code, Cursor or any AI coding tool: it runs a free Shippable scan of your project and fixes what it finds. Built with Lovable, Bolt or v0? Scan your live app. Or upload your package file.
Who is affected
- Linux Linux: 2.6.23
How to check
- Find out whether you run the affected product and which version, then compare it with the versions above.
How to fix
Copies a prompt for Claude Code, Cursor or Codex that asks it to check whether you run this product.
- Apply the vendor's update or mitigation from the references below. If there is none yet, limit exposure of the affected service until there is.
- If a vulnerable version was live, check your logs and rotate the secrets that server could read.
The advisory
In the Linux kernel, the following vulnerability has been resolved:
netfilter: xt_u32: reject invalid shift counts
u32_match_it() executes rule-supplied shift operands on a 32-bit
value. A malformed u32 rule can provide a shift count of 32 or more,
triggering an undefined shift out-of-bounds during packet evaluation.
Validate XT_U32_LEFTSH and XT_U32_RIGHTSH operands in
u32_mt_checkentry() and reject malformed rules before they reach the
packet path.
Check your whole app
Dependencies are only half of it. Free and read-only: before you push, run npx shippable-dev scan localhost:3000 in your project folder, no account needed. For your live app, you prove it's yours with a one-line tag first.
References
- git.kernel.org/stable/c/00d034fe8230dfc5832fe011ff2d81c1a2cc7a29
- git.kernel.org/stable/c/0a8b7a6d763775709c601f584e709ae48bcc000a
- git.kernel.org/stable/c/64cdf7d30ac18e43df6c48004435febb965809a8
- git.kernel.org/stable/c/728f479dc0447ae7eaef87926ff49142e415a811
- git.kernel.org/stable/c/a597a722fb71a534138c20359b655726622b5f17
- git.kernel.org/stable/c/b33b44250d57ab0e5a1e2571b5285fb0d0a7f382
- git.kernel.org/stable/c/ca7c92d9701249e6daf132087756a88cbf2bb2a3
- git.kernel.org/stable/c/cce42014415cecd98aa49b3950e7b02ee7c81268
Merged from NVD. Last updated 23 Oct 2026. All vulnerabilities · RSS · JSON