PT-2026-23409 · Suse · Suse Linux Enterprise Server (Sles) 12 Sp5

Publicado 2026-03-05 · Atualizado 2026-03-26 · CVE-2026-25702

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SUSE Linux Enterprise Server 12 SP5

Description An Improper Access Control issue exists in the kernel of SUSE Linux Enterprise Server 12 SP5, impacting nftables functionality. This prevents firewall rules applied through nftables from functioning as expected. The issue stems from an incorrect kernel backport.

Recommendations Update to a version after 9c294edb7085fb91650bc12233495a8974c5ff2d.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2026-25702

SUSE-SU-2026:1078-1

Produtos afetados

Suse Linux Enterprise Server (Sles) 12 Sp5

Referências · 156

• https://suse.com/security/cve/CVE-2025-68234 · Nota
• https://bugzilla.suse.com/1255274 · Nota
• https://ubuntu.com/security/CVE-2026-25702 · Aviso do Fabricante
• https://bugzilla.suse.com/1252924 · Nota
• https://bugzilla.suse.com/1258226 · Nota
• https://bugzilla.suse.com/1257635 · Nota
• https://bugzilla.suse.com/1258340 · Nota
• https://suse.com/security/cve/CVE-2026-23084 · Nota
• https://bugzilla.suse.com/1258518 · Nota
• https://suse.com/security/cve/CVE-2026-23269 · Nota
• https://bugzilla.suse.com/1252073 · Nota
• https://suse.com/security/cve/CVE-2025-39964 · Nota
• https://suse.com/security/cve/CVE-2025-40103 · Nota
• https://suse.com/security/cve/CVE-2026-23089 · Nota
• https://bugzilla.suse.com/1257755 · Nota