CVE-2026-25702: nftables disabled due to incorrect kernel backport
A Improper Access Control vulnerability in the kernel of SUSE SUSE Linux Enterprise Server 12 SP5 breaks nftables, causing firewall rules applied via nftables to not be effective.This issue affects SUSE Linux Enterprise Server: from 9e6d9d4601768c75fdb0bad3fbbe636e748939c2 before 9c294edb7085fb91650bc12233495a8974c5ff2d.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-25702?
CVE-2026-25702 is considered a critical vulnerability due to its impact on the effectiveness of firewall rules in SUSE Linux Enterprise Server 12 SP5.
How do I fix CVE-2026-25702?
To fix CVE-2026-25702, it is recommended to update to the latest version of SUSE Linux Enterprise Server with patched kernel backports.
What are the consequences of CVE-2026-25702?
The consequences of CVE-2026-25702 include insecure firewall configurations that can lead to unauthorized access and potential compromise of the system.
Which systems are affected by CVE-2026-25702?
CVE-2026-25702 affects SUSE Linux Enterprise Server 12 SP5, specifically those running affected versions between 9e6d9d4601768c75 and 9c294edb7085fb91650bc12233495a8974c5ff2.
Is there a workaround for CVE-2026-25702?
There is no official workaround for CVE-2026-25702; upgrading to a secure version is the advised course of action.