CVE-2026-25702

nftables disabled due to incorrect kernel backport

State: Published
Severity: 7.3 High
Published: Mar 5, 2026
Updated: Mar 5, 2026
Reserved: Feb 5, 2026

Description

A Improper Access Control vulnerability in the kernel of SUSE SUSE Linux Enterprise Server 12 SP5 breaks nftables, causing firewall rules applied via nftables to not be effective.This issue affects SUSE Linux Enterprise Server: from 9e6d9d4601768c75fdb0bad3fbbe636e748939c2 before 9c294edb7085fb91650bc12233495a8974c5ff2d.

Scores

CVSS	Score	Vector	Source
3.1	7.3 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L	suse

Weaknesses

CWE-284 Improper Access Control

Affected Products

Product	Versions
SUSE Linux Enterprise ServerSUSE	9e6d9d4601768c75fdb0bad3fbbe636e748939c2 to before 9c294edb7085fb91650bc12233495a8974c5ff2dAffected

References

https://bugzilla.suse.com/show_bug.cgi?id=CVE-2026-25702

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.