CVE-2026-72347

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-72347
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72347.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-72347
Downstream
Published
2026-08-15T05:55:51Z
Modified
2026-08-18T03:56:24Z
Severity
  • 7.3 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H CVSS Calculator
Summary
netfilter: xt_connmark: reject invalid shift parameters
Details

In the Linux kernel, the following vulnerability has been resolved:

netfilter: xt_connmark: reject invalid shift parameters

Revision 2 of the CONNMARK target accepts user-controlled shift parameters and applies them to 32-bit mark values in connmark_tg_shift().

A shift_bits value of 32 or more triggers an undefined-shift bug when the rule is evaluated. Invalid shift_dir values are also accepted and silently fall back to the left-shift path.

Reject invalid revision-2 shift parameters in connmark_tg_check() so malformed rules fail at installation time, before they can reach the packet path.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72347.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
472a73e00757b971d613d796374d2727b2e4954d
Fixed
d8ce63d928b457fba7ed1e302492dfd32293671c
Fixed
9657bb11a6376ab0a79f05d433713d6944111e9d
Fixed
8ace320ac4416f5e5fbcd065309fb2dfcce787b0
Fixed
c3fa852d117b3fda72265e4230e3967db4a74fcf
Fixed
4eef84b09a3836919360c4232b0f16651a155eec
Fixed
230173cc6105bdfb2696d37e6e56687b003fbe63
Fixed
1b47026fb4b35bac850ad6e8a4ad7fc018e09ebc

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72347.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.17.0
Fixed
5.15.212
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.178
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.145
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.97
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.40
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.1.5

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72347.json"