In the Linux kernel, the following vulnerability has been resolved:

netfilter: xt_u32: reject invalid shift counts

u32_match_it() executes rule-supplied shift operands on a 32-bit
value. A malformed u32 rule can provide a shift count of 32 or more,
triggering an undefined shift out-of-bounds during packet evaluation.

Validate XT_U32_LEFTSH and XT_U32_RIGHTSH operands in
u32_mt_checkentry() and reject malformed rules before they reach the
packet path.

https://git.kernel.org/stable/c/00d034fe8230dfc5832fe011ff2d81c1a2cc7a29

https://git.kernel.org/stable/c/0a8b7a6d763775709c601f584e709ae48bcc000a

https://git.kernel.org/stable/c/64cdf7d30ac18e43df6c48004435febb965809a8

https://git.kernel.org/stable/c/728f479dc0447ae7eaef87926ff49142e415a811

https://git.kernel.org/stable/c/a597a722fb71a534138c20359b655726622b5f17

https://git.kernel.org/stable/c/b33b44250d57ab0e5a1e2571b5285fb0d0a7f382

https://git.kernel.org/stable/c/ca7c92d9701249e6daf132087756a88cbf2bb2a3

https://git.kernel.org/stable/c/cce42014415cecd98aa49b3950e7b02ee7c81268

[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["net/netfilter/xt_u32.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"1b50b8a371e90a5e110f466e4ac02cf6b5f681de","lessThan":"ca7c92d9701249e6daf132087756a88cbf2bb2a3","versionType":"git","status":"affected"},{"version":"1b50b8a371e90a5e110f466e4ac02cf6b5f681de","lessThan":"b33b44250d57ab0e5a1e2571b5285fb0d0a7f382","versionType":"git","status":"affected"},{"version":"1b50b8a371e90a5e110f466e4ac02cf6b5f681de","lessThan":"728f479dc0447ae7eaef87926ff49142e415a811","versionType":"git","status":"affected"},{"version":"1b50b8a371e90a5e110f466e4ac02cf6b5f681de","lessThan":"0a8b7a6d763775709c601f584e709ae48bcc000a","versionType":"git","status":"affected"},{"version":"1b50b8a371e90a5e110f466e4ac02cf6b5f681de","lessThan":"cce42014415cecd98aa49b3950e7b02ee7c81268","versionType":"git","status":"affected"},{"version":"1b50b8a371e90a5e110f466e4ac02cf6b5f681de","lessThan":"a597a722fb71a534138c20359b655726622b5f17","versionType":"git","status":"affected"},{"version":"1b50b8a371e90a5e110f466e4ac02cf6b5f681de","lessThan":"00d034fe8230dfc5832fe011ff2d81c1a2cc7a29","versionType":"git","status":"affected"},{"version":"1b50b8a371e90a5e110f466e4ac02cf6b5f681de","lessThan":"64cdf7d30ac18e43df6c48004435febb965809a8","versionType":"git","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["net/netfilter/xt_u32.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"2.6.23","status":"affected"},{"version":"0","lessThan":"2.6.23","versionType":"semver","status":"unaffected"},{"version":"5.10.261","lessThanOrEqual":"5.10.*","versionType":"semver","status":"unaffected"},{"version":"5.15.212","lessThanOrEqual":"5.15.*","versionType":"semver","status":"unaffected"},{"version":"6.1.178","lessThanOrEqual":"6.1.*","versionType":"semver","status":"unaffected"},{"version":"6.6.145","lessThanOrEqual":"6.6.*","versionType":"semver","status":"unaffected"},{"version":"6.12.97","lessThanOrEqual":"6.12.*","versionType":"semver","status":"unaffected"},{"version":"6.18.40","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.1.5","lessThanOrEqual":"7.1.*","versionType":"semver","status":"unaffected"},{"version":"7.2-rc3","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]