Host Name Component says:
You can only use netmasks that specify a multiple of 8 bits of the address to match. That is, only the following netmasks are allowed:
Looking at sql/sql_acl.cc, the paragraph above appears not to be true.
If that is the case, it should be removed.