PT-2026-23409

CVE-2026-25702

·

Published

2026-03-05

·

Updated

2026-10-09

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions SUSE Linux Enterprise Server 12 SP5
Description An Improper Access Control issue exists in the kernel of SUSE Linux Enterprise Server 12 SP5, impacting nftables functionality. This prevents firewall rules applied through nftables from functioning as expected. The issue stems from an incorrect kernel backport.
Recommendations Update to a version after 9c294edb7085fb91650bc12233495a8974c5ff2d.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-284: Improper Access Control
Related identifiers
CVE-2026-25702
SUSE-SU-2026:1078-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com