AUGUST 27, 2026
Live Feed
Back to database
Case File

CVE-2026-52920

HIGH · CVSS 8.3 EPSS 0.30%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2026-06-24 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 8.3. It affects Linux.

CVE
CVE-2026-52920
Severity
HIGH
CVSS
8.3
EPSS
0.30%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_policy: fix strict mode inbound policy matching match_policy_in() walks sec_path entries from the last transform to the first one, but strict policy matching needs to consume info->pol[] in the same forward order as the rule layout. Derive the strict-match policy position from the number of transforms already consumed so that multi-element inbound rules are matched consistently.

Related CVEs

Other vulnerabilities affecting the same vendor(s)