Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-46101— netfilter: reject zero shift in nft_bitwise

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于nft_bitwise未拒绝零移位操作数，可能导致未定义行为。

AI Predicted 7.8 Difficulty: Moderate EPSS 0.17% · P6

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Affected Version Matrix 18

VendorProduct Version RangeStatus
Linux Linux 567d746b55bc66d3800c9ae91d50f0c5deb2fd93< 9baa08d6b6b096fad70049533f0d705d85fdc979 affected
567d746b55bc66d3800c9ae91d50f0c5deb2fd93< 4fccea585631621c975883911a08d15b6671f7dc affected
567d746b55bc66d3800c9ae91d50f0c5deb2fd93< 9ad26c272405f53834871cc2e46b9b5393a666c3 affected
567d746b55bc66d3800c9ae91d50f0c5deb2fd93< bffef0acec9c3b837a785248a893137fb7f26c95 affected
567d746b55bc66d3800c9ae91d50f0c5deb2fd93< ca24f1243ad1a4d12d6a23876bbbe3ed02099853 affected
567d746b55bc66d3800c9ae91d50f0c5deb2fd93< 6f820139d16a4c9865a145d4a9cf9c92cc632c14 affected
567d746b55bc66d3800c9ae91d50f0c5deb2fd93< f370205974f171a5868c13ff30d7642fed46e47b affected
567d746b55bc66d3800c9ae91d50f0c5deb2fd93< fe11e5c40817b84abaa5d83bfb6586d8412bfd07 affected
… +10 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-46101

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
netfilter: reject zero shift in nft_bitwise
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: netfilter: reject zero shift in nft_bitwise Reject zero shift operands for nft_bitwise left and right shift expressions during initialization. The carry propagation logic computes the carry from the adjacent 32-bit word using BITS_PER_TYPE(u32) - shift. A zero shift operand turns this into a 32-bit shift, which is undefined behaviour. Reject zero shift operands in the control plane, alongside the existing check for values greater than or equal to 32, so malformed rules never reach the packet path.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于nft_bitwise未拒绝零移位操作数，可能导致未定义行为。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux 567d746b55bc66d3800c9ae91d50f0c5deb2fd93 ~ 9baa08d6b6b096fad70049533f0d705d85fdc979 -
Linux Linux 5.6 -

II. Public POCs for CVE-2026-46101

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-46101

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-46101 (7)

Other References for CVE-2026-46101 (1)

Same Patch Batch · Linux · 2026-05-27 · 275 CVEs total

CVE-2026-45988 9.8 CRITICAL rxrpc: Fix re-decryption of RESPONSE packets
CVE-2026-45898 9.8 CRITICAL RDMA/iwcm: Fix workqueue list corruption by removing work_list
CVE-2026-45972 9.8 CRITICAL smb: client: fix potential UAF and double free in smb2_open_file()
CVE-2026-46039 9.8 CRITICAL rxgk: Fix potential integer overflow in length check
CVE-2026-46043 9.1 CRITICAL RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv
CVE-2026-45945 8.8 HIGH iommu/vt-d: Fix race condition during PASID entry replacement
CVE-2026-46056 8.8 HIGH Bluetooth: hci_event: fix potential UAF in SSP passkey handlers
CVE-2026-45843 8.2 HIGH slip: bound decode() reads against the compressed packet length
CVE-2026-46037 8.2 HIGH ipv4: icmp: validate reply type before using icmp_pointers
CVE-2025-71311 8.2 HIGH fs/ntfs3: Initialize new folios before use
CVE-2026-46010 8.1 HIGH rxrpc: Fix error handling in rxgk_extract_token()
CVE-2026-46099 8.1 HIGH net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels
CVE-2026-46076 7.9 HIGH KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1
CVE-2026-45931 7.8 HIGH accel/amdxdna: Hold mm structure across iommu_sva_unbind_device()
CVE-2026-45935 7.8 HIGH fs/ntfs3: Fix slab-out-of-bounds read in DeleteIndexEntryRoot
CVE-2026-45909 7.8 HIGH clk: mediatek: Drop __initconst from gates
CVE-2026-46065 7.8 HIGH fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info
CVE-2026-46058 7.8 HIGH media: amphion: Fix race between m2m job_abort and device_run
CVE-2026-46015 7.8 HIGH tcp: call sk_data_ready() after listener migration
CVE-2026-45959 7.8 HIGH crypto: ccp - Fix a crash due to incorrect cleanup usage of kfree

Showing top 20 of 275 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2026-46101

No comments yet

Leave a comment