Critical severity · published Mar 5, 2026
CVE-2026-25702
nftables disabled due to incorrect kernel backport
9.8
CVSS
0.2%
EPSS
No
On KEV
Description
A Improper Access Control vulnerability in the kernel of SUSE SUSE Linux Enterprise Server 12 SP5 breaks nftables, causing firewall rules applied via nftables to not be effective.This issue affects SUSE Linux Enterprise Server: from 9e6d9d4601768c75fdb0bad3fbbe636e748939c2 before 9c294edb7085fb91650bc12233495a8974c5ff2d.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 11% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SL
SUSE Linux Enterprise Server · SUSE
9e6d9d4601768c75fdb0bad3fbbe636e748939c2 before 9c294edb7085fb91650bc12233495a8974c5ff2d · source: vendor
LE
Linux Enterprise Server · Suse
12 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-25702
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-25702
Broken Link
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2026-25702
More from SUSE Linux Enterprise Server
8.4
CVE-2016-3714
ImageMagick Improper Input Validation Vulnerability
5.5
CVE-2014-0196
Linux Kernel Race Condition Vulnerability
9.8
CVE-2011-3172
A vulnerability in pam_modules of SUSE Linux Enterprise allows attackers to log into accounts that should have been disabled
9.8
CVE-2015-8779
Stack-based buffer overflow in the catopen function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service…
9.8
CVE-2015-8778
Integer overflow in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute…