CVE Explorer

CVE-2026-46101

In the Linux kernel, the following vulnerability has been resolved: netfilter: reject zero shift in nft_bitwise Reject zero shift operands for nft_bitwise left and right shift expressions during initialization. The carry propagation logic computes the carry from the adjacent 32-bit word using BITS_PER_TYPE(u32) - shift. A zero shift operand turns this into a 32-bit shift, which is undefined behaviour. Reject zero shift operands in the control plane, alongside the existing check for values gr

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:b067b0505e64c90ab9eb40f9f6d31c1af7322cc15a966685eb45b6f7ea204874

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["net/netfilter/nft_bitwise.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.6"},{"lessThan":"5.6","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"les…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:0437c6f64479761cb6ea61ed9b302468f6e826ba81d7f71c3059203af4c52ba7 · sha256:9df9d98790e0173a… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/netfilter/nft_bitwise.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"9baa08d6b6b096fad70049533f0d705d85fdc979","status":"affected","version":"567d746b55bc66d3800c9ae91d50f0c5deb2fd93","versionType":"git"},{"lessThan":"4fccea585631621c975883911a08d15b6671f7dc","status":"affected","version":"567d746b55bc66d3800c9ae91d50f0c5deb2fd93","versionType":"git"},{"lessThan":"9ad26c272405f53834871cc2e46b9b5393a666c3","status":"affected","version":"567d746b55bc66d380…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:0437c6f64479761cb6ea61ed9b302468f6e826ba81d7f71c3059203af4c52ba7 · sha256:9df9d98790e0173a… · /containers/cna/affected/0

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:0437c6f64479761cb6ea61ed9b302468f6e826ba81d7f71c3059203af4c52ba7 · sha256:9df9d98790e0173a… · /containers/cna/affected/1

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:0437c6f64479761cb6ea61ed9b302468f6e826ba81d7f71c3059203af4c52ba7 · sha256:9df9d98790e0173a… · /containers/cna/affected/0

Source references

8 source assertions

{"url":"https://git.kernel.org/stable/c/4fccea585631621c975883911a08d15b6671f7dc"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:0437c6f64479761cb6ea61ed9b302468f6e826ba81d7f71c3059203af4c52ba7 · sha256:9df9d98790e0173a… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/6f820139d16a4c9865a145d4a9cf9c92cc632c14"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:0437c6f64479761cb6ea61ed9b302468f6e826ba81d7f71c3059203af4c52ba7 · sha256:9df9d98790e0173a… · /containers/cna/references/5

{"url":"https://git.kernel.org/stable/c/9ad26c272405f53834871cc2e46b9b5393a666c3"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:0437c6f64479761cb6ea61ed9b302468f6e826ba81d7f71c3059203af4c52ba7 · sha256:9df9d98790e0173a… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/9baa08d6b6b096fad70049533f0d705d85fdc979"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:0437c6f64479761cb6ea61ed9b302468f6e826ba81d7f71c3059203af4c52ba7 · sha256:9df9d98790e0173a… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/bffef0acec9c3b837a785248a893137fb7f26c95"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:0437c6f64479761cb6ea61ed9b302468f6e826ba81d7f71c3059203af4c52ba7 · sha256:9df9d98790e0173a… · /containers/cna/references/3

{"url":"https://git.kernel.org/stable/c/ca24f1243ad1a4d12d6a23876bbbe3ed02099853"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:0437c6f64479761cb6ea61ed9b302468f6e826ba81d7f71c3059203af4c52ba7 · sha256:9df9d98790e0173a… · /containers/cna/references/4

{"url":"https://git.kernel.org/stable/c/f370205974f171a5868c13ff30d7642fed46e47b"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:0437c6f64479761cb6ea61ed9b302468f6e826ba81d7f71c3059203af4c52ba7 · sha256:9df9d98790e0173a… · /containers/cna/references/6

{"url":"https://git.kernel.org/stable/c/fe11e5c40817b84abaa5d83bfb6586d8412bfd07"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:0437c6f64479761cb6ea61ed9b302468f6e826ba81d7f71c3059203af4c52ba7 · sha256:9df9d98790e0173a… · /containers/cna/references/7

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer