Ingress ACL Policy Bypass in Arista EOS Platforms

CVE-2025-2826

What is CVE-2025-2826?

The vulnerability allows for improper enforcement of Access Control List (ACL) policies on platforms running Arista EOS. Specifically, enabled IPv4 ingress ACL, MAC ingress ACL, or IPv6 standard ingress ACL on Ethernet or Link Aggregation Group (LAG) interfaces may malfunction, leading to potential security risks. This defect can result in the erroneous allowance or denial of incoming packets, with permitted packets unexpectedly being dropped and denied packets being incorrectly allowed, compromising network integrity.

References