Network Traffic Filtering Vulnerability in Linux Kernel

CVE-2026-52920

What is CVE-2026-52920?

A vulnerability in the Linux kernel's netfilter component has been identified that affects strict mode inbound policy matching. The issue arises in the match_policy_in() function, which processes security path entries incorrectly when evaluating strict match policies. This misalignment can result in inconsistent matching of multi-element inbound rules, potentially leading to unauthorized access or unintended traffic filtering. It is essential for users to ensure they are running updated versions of the Linux kernel to mitigate these risks effectively.

References