CVE-2026-72347

Last refreshed2026-10-17

Status: UPDATED | Advisory ID: CVE-2026-72347

Key Details

CVE	CVE-2026-72347
CVSS Score / Version	7.3 (High) / CVSS v3.1
Updated	2026-10-16
CVSS Vector	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H`
CVSS Prose	attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is low; integrity impact is high; availability impact is high.
Affected products	Linux Kernel

Vendor	Product	Affected Versions	Patch Status
Linux	Linux Kernel

Vendor

Product

Affected Versions

Patch Status

Linux

Linux Kernel

Subsystems	OT Supporting Infrastructure
Sectors	All Sectors

In the Linux kernel, the following vulnerability has been resolved:

netfilter: xt_connmark: reject invalid shift parameters

Revision 2 of the CONNMARK target accepts user-controlled shift

parameters and applies them to 32-bit mark values in

connmark_tg_shift().

A shift_bits value of 32 or more triggers an undefined-shift bug when

the rule is evaluated. Invalid shift_dir values are also accepted and

silently fall back to the left-shift path.

Reject invalid revision-2 shift parameters in connmark_tg_check() so

malformed rules fail at installation time, before they can reach the

packet path. (NVD)

Monitor Linux's web page for any future patch releases.

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-72347
CVE	https://www.cve.org/CVERecord?id=CVE-2026-72347

Source

Reference

NVD

CVE