Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.3
SUSE Linux Server Firewall Rules Not Applied Due to Kernel Flaw
UBUNTU-CVE-2026-25702
Summary
A flaw in the kernel of SUSE Linux Enterprise Server 12 SP5 affects the way it handles firewall rules. This means that firewall settings may not be enforced, potentially allowing unauthorized access to your system. Update your system to a fixed version to ensure firewall rules are properly applied.
What to do
No fix is available yet. Check with your software vendor for updates.
Affected software
| Vendor | Product | Affected versions | Fix available |
|---|---|---|---|
| canonical | linux | All versions | – |
| canonical | linux-aws | All versions | – |
| canonical | linux-azure | All versions | – |
| canonical | linux-lts-xenial | All versions | – |
| canonical | linux | All versions | – |
| canonical | linux-aws | All versions | – |
| canonical | linux-aws-hwe | All versions | – |
| canonical | linux-azure | All versions | – |
| canonical | linux-gcp | All versions | – |
| canonical | linux-hwe | All versions | – |
| canonical | linux-hwe-edge | All versions | – |
| canonical | linux-kvm | All versions | – |
| canonical | linux-oracle | All versions | – |
| canonical | linux-fips | All versions | – |
| canonical | linux-fips | All versions | – |
| canonical | linux | All versions | – |
| canonical | linux-aws | All versions | – |
| canonical | linux-aws-5.0 | All versions | – |
| canonical | linux-aws-5.3 | All versions | – |
| canonical | linux-aws-5.4 | All versions | – |
| canonical | linux-azure | All versions | – |
| canonical | linux-azure-4.15 | All versions | – |
| canonical | linux-azure-5.3 | All versions | – |
| canonical | linux-azure-5.4 | All versions | – |
| canonical | linux-azure-edge | All versions | – |
| canonical | linux-gcp | All versions | – |
| canonical | linux-gcp-4.15 | All versions | – |
| canonical | linux-gcp-5.3 | All versions | – |
| canonical | linux-gcp-5.4 | All versions | – |
| canonical | linux-gke-4.15 | All versions | – |
| canonical | linux-gke-5.4 | All versions | – |
| canonical | linux-gkeop-5.4 | All versions | – |
| canonical | linux-hwe | All versions | – |
| canonical | linux-hwe-5.4 | All versions | – |
| canonical | linux-hwe-edge | All versions | – |
| canonical | linux-ibm-5.4 | All versions | – |
| canonical | linux-kvm | All versions | – |
| canonical | linux-oem | All versions | – |
| canonical | linux-oracle | All versions | – |
| canonical | linux-oracle-5.0 | All versions | – |
| canonical | linux-oracle-5.3 | All versions | – |
| canonical | linux-oracle-5.4 | All versions | – |
| canonical | linux-raspi-5.4 | All versions | – |
| canonical | linux-aws-fips | All versions | – |
| canonical | linux-azure-fips | All versions | – |
| canonical | linux-fips | All versions | – |
| canonical | linux-gcp-fips | All versions | – |
| canonical | linux-aws-fips | All versions | – |
| canonical | linux-azure-fips | All versions | – |
| canonical | linux-fips | All versions | – |
| canonical | linux-gcp-fips | All versions | – |
| canonical | linux | All versions | – |
| canonical | linux-aws | All versions | – |
| canonical | linux-aws-5.11 | All versions | – |
| canonical | linux-aws-5.13 | All versions | – |
| canonical | linux-aws-5.15 | All versions | – |
| canonical | linux-aws-5.8 | All versions | – |
| canonical | linux-azure | All versions | – |
| canonical | linux-azure-5.11 | All versions | – |
| canonical | linux-azure-5.13 | All versions | – |
| canonical | linux-azure-5.15 | All versions | – |
| canonical | linux-azure-5.8 | All versions | – |
| canonical | linux-azure-fde | All versions | – |
| canonical | linux-azure-fde-5.15 | All versions | – |
| canonical | linux-bluefield | All versions | – |
| canonical | linux-gcp | All versions | – |
| canonical | linux-gcp-5.11 | All versions | – |
| canonical | linux-gcp-5.13 | All versions | – |
| canonical | linux-gcp-5.15 | All versions | – |
| canonical | linux-gcp-5.8 | All versions | – |
| canonical | linux-gke | All versions | – |
| canonical | linux-gke-5.15 | All versions | – |
| canonical | linux-gkeop | All versions | – |
| canonical | linux-gkeop-5.15 | All versions | – |
| canonical | linux-hwe-5.11 | All versions | – |
| canonical | linux-hwe-5.13 | All versions | – |
| canonical | linux-hwe-5.15 | All versions | – |
| canonical | linux-hwe-5.8 | All versions | – |
| canonical | linux-ibm | All versions | – |
| canonical | linux-ibm-5.15 | All versions | – |
| canonical | linux-intel-5.13 | All versions | – |
| canonical | linux-intel-iotg-5.15 | All versions | – |
| canonical | linux-iot | All versions | – |
| canonical | linux-kvm | All versions | – |
| canonical | linux-lowlatency-hwe-5.15 | All versions | – |
| canonical | linux-nvidia-tegra-5.15 | All versions | – |
| canonical | linux-oem-5.10 | All versions | – |
| canonical | linux-oem-5.13 | All versions | – |
| canonical | linux-oem-5.14 | All versions | – |
| canonical | linux-oem-5.6 | All versions | – |
| canonical | linux-oracle | All versions | – |
| canonical | linux-oracle-5.11 | All versions | – |
| canonical | linux-oracle-5.13 | All versions | – |
| canonical | linux-oracle-5.15 | All versions | – |
| canonical | linux-oracle-5.8 | All versions | – |
| canonical | linux-raspi | All versions | – |
| canonical | linux-raspi2 | All versions | – |
| canonical | linux-riscv | All versions | – |
| canonical | linux-riscv-5.11 | All versions | – |
| canonical | linux-riscv-5.15 | All versions | – |
| canonical | linux-riscv-5.8 | All versions | – |
| canonical | linux-xilinx-zynqmp | All versions | – |
| canonical | linux-aws-fips | All versions | – |
| canonical | linux-azure-fips | All versions | – |
| canonical | linux-fips | All versions | – |
| canonical | linux-gcp-fips | All versions | – |
| canonical | linux-aws-fips | All versions | – |
| canonical | linux-azure-fips | All versions | – |
| canonical | linux-fips | All versions | – |
| canonical | linux-gcp-fips | All versions | – |
| canonical | linux | All versions | – |
| canonical | linux-allwinner-5.19 | All versions | – |
| canonical | linux-aws | All versions | – |
| canonical | linux-aws-5.19 | All versions | – |
| canonical | linux-aws-6.2 | All versions | – |
| canonical | linux-aws-6.5 | All versions | – |
| canonical | linux-aws-6.8 | All versions | – |
| canonical | linux-azure | All versions | – |
| canonical | linux-azure-5.19 | All versions | – |
| canonical | linux-azure-6.2 | All versions | – |
| canonical | linux-azure-6.5 | All versions | – |
| canonical | linux-azure-6.8 | All versions | – |
| canonical | linux-azure-fde | All versions | – |
| canonical | linux-azure-fde-5.19 | All versions | – |
| canonical | linux-azure-fde-6.2 | All versions | – |
| canonical | linux-azure-fde-6.8 | All versions | – |
| canonical | linux-gcp | All versions | – |
| canonical | linux-gcp-5.19 | All versions | – |
| canonical | linux-gcp-6.2 | All versions | – |
| canonical | linux-gcp-6.5 | All versions | – |
| canonical | linux-gcp-6.8 | All versions | – |
| canonical | linux-gke | All versions | – |
| canonical | linux-gkeop | All versions | – |
| canonical | linux-hwe-5.19 | All versions | – |
| canonical | linux-hwe-6.2 | All versions | – |
| canonical | linux-hwe-6.5 | All versions | – |
| canonical | linux-hwe-6.8 | All versions | – |
| canonical | linux-ibm | All versions | – |
| canonical | linux-ibm-6.8 | All versions | – |
| canonical | linux-intel-iot-realtime | All versions | – |
| canonical | linux-intel-iotg | All versions | – |
| canonical | linux-kvm | All versions | – |
| canonical | linux-lowlatency | All versions | – |
| canonical | linux-lowlatency-hwe-5.19 | All versions | – |
| canonical | linux-lowlatency-hwe-6.2 | All versions | – |
| canonical | linux-lowlatency-hwe-6.5 | All versions | – |
| canonical | linux-lowlatency-hwe-6.8 | All versions | – |
| canonical | linux-nvidia | All versions | – |
| canonical | linux-nvidia-6.2 | All versions | – |
| canonical | linux-nvidia-6.5 | All versions | – |
| canonical | linux-nvidia-6.8 | All versions | – |
| canonical | linux-nvidia-tegra | All versions | – |
| canonical | linux-nvidia-tegra-igx | All versions | – |
| canonical | linux-oem-5.17 | All versions | – |
| canonical | linux-oem-6.0 | All versions | – |
| canonical | linux-oem-6.1 | All versions | – |
| canonical | linux-oem-6.5 | All versions | – |
| canonical | linux-oracle | All versions | – |
| canonical | linux-oracle-6.5 | All versions | – |
| canonical | linux-oracle-6.8 | All versions | – |
| canonical | linux-raspi | All versions | – |
| canonical | linux-realtime | All versions | – |
| canonical | linux-riscv | All versions | – |
| canonical | linux-riscv-5.19 | All versions | – |
| canonical | linux-riscv-6.5 | All versions | – |
| canonical | linux-riscv-6.8 | All versions | – |
| canonical | linux-starfive-5.19 | All versions | – |
| canonical | linux-starfive-6.2 | All versions | – |
| canonical | linux-starfive-6.5 | All versions | – |
| canonical | linux-xilinx-zynqmp | All versions | – |
| canonical | linux-bluefield | All versions | – |
| canonical | linux-aws-fips | All versions | – |
| canonical | linux-azure-fips | All versions | – |
| canonical | linux-fips | All versions | – |
| canonical | linux-gcp-fips | All versions | – |
| canonical | linux-aws-fips | All versions | – |
| canonical | linux-azure-fips | All versions | – |
| canonical | linux-fips | All versions | – |
| canonical | linux-gcp-fips | All versions | – |
| canonical | linux-intel-iot-realtime | All versions | – |
| canonical | linux-realtime | All versions | – |
| canonical | linux-realtime-6.8 | All versions | – |
| canonical | linux | All versions | – |
| canonical | linux-aws | All versions | – |
| canonical | linux-aws-6.14 | All versions | – |
| canonical | linux-aws-6.17 | All versions | – |
| canonical | linux-azure | All versions | – |
| canonical | linux-azure-6.11 | All versions | – |
| canonical | linux-azure-6.14 | All versions | – |
| canonical | linux-azure-6.17 | All versions | – |
| canonical | linux-azure-fde | All versions | – |
| canonical | linux-azure-fde-6.14 | All versions | – |
| canonical | linux-azure-fde-6.17 | All versions | – |
| canonical | linux-azure-nvidia | All versions | – |
| canonical | linux-azure-nvidia-6.14 | All versions | – |
| canonical | linux-gcp | All versions | – |
| canonical | linux-gcp-6.11 | All versions | – |
| canonical | linux-gcp-6.14 | All versions | – |
| canonical | linux-gcp-6.17 | All versions | – |
| canonical | linux-gke | All versions | – |
| canonical | linux-gkeop | All versions | – |
| canonical | linux-hwe-6.11 | All versions | – |
| canonical | linux-hwe-6.14 | All versions | – |
| canonical | linux-hwe-6.17 | All versions | – |
| canonical | linux-ibm | All versions | – |
| canonical | linux-lowlatency | All versions | – |
| canonical | linux-lowlatency-hwe-6.11 | All versions | – |
| canonical | linux-nvidia | All versions | – |
| canonical | linux-nvidia-6.11 | All versions | – |
| canonical | linux-nvidia-lowlatency | All versions | – |
| canonical | linux-nvidia-tegra | All versions | – |
| canonical | linux-oem-6.11 | All versions | – |
| canonical | linux-oem-6.14 | All versions | – |
| canonical | linux-oem-6.17 | All versions | – |
| canonical | linux-oem-6.8 | All versions | – |
| canonical | linux-oracle | All versions | – |
| canonical | linux-oracle-6.14 | All versions | – |
| canonical | linux-oracle-6.17 | All versions | – |
| canonical | linux-raspi | All versions | – |
| canonical | linux-raspi-realtime | All versions | – |
| canonical | linux-realtime | All versions | – |
| canonical | linux-riscv | All versions | – |
| canonical | linux-riscv-6.14 | All versions | – |
| canonical | linux-riscv-6.17 | All versions | – |
| canonical | linux-xilinx | All versions | – |
| canonical | linux-aws-fips | All versions | – |
| canonical | linux-azure-fips | All versions | – |
| canonical | linux-fips | All versions | – |
| canonical | linux-gcp-fips | All versions | – |
| canonical | linux-raspi-realtime | All versions | – |
| canonical | linux-realtime | All versions | – |
| canonical | linux-realtime-6.14 | All versions | – |
| canonical | linux | All versions | – |
| canonical | linux-aws | All versions | – |
| canonical | linux-azure | All versions | – |
| canonical | linux-azure-fde | All versions | – |
| canonical | linux-gcp | All versions | – |
| canonical | linux-oracle | All versions | – |
| canonical | linux-raspi | All versions | – |
| canonical | linux-realtime | All versions | – |
| canonical | linux-riscv | All versions | – |
Original title
A Improper Access Control vulnerability in the kernel of SUSE SUSE Linux Enterprise Server 12 SP5 breaks nftables, causing firewall rules applied via nftables to not be effective.This issue affects...
Original description
A Improper Access Control vulnerability in the kernel of SUSE SUSE Linux Enterprise Server 12 SP5 breaks nftables, causing firewall rules applied via nftables to not be effective.This issue affects SUSE Linux Enterprise Server: from 9e6d9d4601768c75fdb0bad3fbbe636e748939c2 before 9c294edb7085fb91650bc12233495a8974c5ff2d.
osv CVSS3.1
7.3
- https://ubuntu.com/security/CVE-2026-25702 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-25702 Third Party Advisory
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2026-25702 Third Party Advisory
Published: 5 Mar 2026 · Updated: 13 Mar 2026 · First seen: 9 Mar 2026