CVE-2026-25702CWE-284

nftables disabled due to incorrect kernel backport

High · published March 5, 2026

CVSS v3.1
7.3
EPSS
0%
Percentile
30.8
In the wild
Unconfirmed
What it is

A Improper Access Control vulnerability in the kernel of SUSE SUSE Linux Enterprise Server 12 SP5 breaks nftables, causing firewall rules applied via nftables to not be effective.This issue affects SUSE Linux Enterprise Server: from 9e6d9d4601768c75fdb0bad3fbbe636e748939c2 before 9c294edb7085fb91650bc12233495a8974c5ff2d.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00380 · 30.8th percentile
Weakness
CWE-284 · Improper Access Control
Published
2026-03-05T07:00Z
EPSS history
Timeline
  • 05 MAR 07:00Z
    nftables disabled due to incorrect kernel backport
    cvelistv5