Improper Access Control Vulnerability in SUSE Linux Enterprise Server
CVE-2026-25702
7.3HIGH
What is CVE-2026-25702?
A vulnerability in the kernel of SUSE Linux Enterprise Server 12 SP5 has been identified, which allows for ineffective firewall rules when using nftables. This flaw arises from improper access control mechanisms, leading to potential security risks as firewall configurations may not enforce intended protections. Users running affected versions should evaluate their security posture and consider applying available updates to mitigate this issue.
Affected Version(s)
SUSE Linux Enterprise Server 9e6d9d4601768c75fdb0bad3fbbe636e748939c2 < 9c294edb7085fb91650bc12233495a8974c5ff2d