PT-2026-23409 · Suse · Suse Linux Enterprise Server (Sles) 12 Sp5

Published 2026-03-05 · Updated 2026-03-26 · CVE-2026-25702

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SUSE Linux Enterprise Server 12 SP5

Description An Improper Access Control issue exists in the kernel of SUSE Linux Enterprise Server 12 SP5, impacting nftables functionality. This prevents firewall rules applied through nftables from functioning as expected. The issue stems from an incorrect kernel backport.

Recommendations Update to a version after 9c294edb7085fb91650bc12233495a8974c5ff2d.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2026-25702

SUSE-SU-2026:1078-1

Affected Products

Suse Linux Enterprise Server (Sles) 12 Sp5

References · 156

• https://ubuntu.com/security/CVE-2026-25702 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-25702 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-25702 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:1078-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-25702 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-25702 · Vendor Advisory
• https://suse.com/security/cve/CVE-2025-68234 · Note
• https://bugzilla.suse.com/1255274 · Note
• https://bugzilla.suse.com/1252924 · Note
• https://bugzilla.suse.com/1258226 · Note
• https://bugzilla.suse.com/1257635 · Note
• https://bugzilla.suse.com/1258340 · Note
• https://suse.com/security/cve/CVE-2026-23084 · Note
• https://bugzilla.suse.com/1258518 · Note
• https://suse.com/security/cve/CVE-2026-23269 · Note