CVE-2026-52920

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the netfilter module where the match policy in() function processes sec path entries in reverse order, from the last transform to the first. For strict policy matching, the info->pol[] must be consumed in the same forward order as the rule layout to ensure that multi-element inbound rules are matched consistently.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.