01 Record

CVE-2026-52920

netfilter: xt_policy: fix strict mode inbound policy matching

HighPUBLISHEDCNA: Linux

CNA base score8.3 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H

View raw JSON

02 Description

netfilter: xt_policy: fix strict mode inbound policy matching

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.30% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 22.0% of scored records. A rank, not a probability.
NVD base score: 8.3 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H
NVD analysis status: Analyzed. NVD last modified this record on 2026-07-08.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-06-24 07:14Z2 MO AGO

Last updated

2026-08-05 12:31Z1 MO AGO

Reserved

2026-06-09

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 8.3)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H

Weaknesses

CWE-551Incorrect Behavior Order: Authorization Before Parsing and CanonicalizationBase

Data version

5.2

Document digest

0d28927a405f82b6b035b8efe3f9ce44ce5baae9a617f85d7676ef2ab266dc38

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxc4b885139203d37f76662c37ae645fe8e0f4e4e5 to < eb323f7b82d2e2f638de0cc2a177803eb20e0707, c4b885139203d37f76662c37ae645fe8e0f4e4e5 to < fc1c518bb1f054831ecabb32da9b8e1dff9699c6, c4b885139203d37f76662c37ae645fe8e0f4e4e5 to < f98b7f85e04b40e28b08c461ded0cc79f14f5509, c4b885139203d37f76662c37ae645fe8e0f4e4e5 to < 82664d0f1ba25e4f9a71994954abae24c60f4067, c4b885139203d37f76662c37ae645fe8e0f4e4e5 to < b130a6eefa02bd4d475f2f059da8bcfb3e7d18d9, c4b885139203d37f76662c37ae645fe8e0f4e4e5 to < 938867e870fb5471bb16f442aeac81326e05bf65, c4b885139203d37f76662c37ae645fe8e0f4e4e5 to < 392cc1d8408b5665215c1e9290bbf0f92339b043, c4b885139203d37f76662c37ae645fe8e0f4e4e5 to < 4b2b4d7d4e203c92db8966b163edfacb1f0e1e29, 2.6.17—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/eb323f7b82d2e2f638de0cc2a177803eb20e0707
git.kernel.orghttps://git.kernel.org/stable/c/fc1c518bb1f054831ecabb32da9b8e1dff9699c6
git.kernel.orghttps://git.kernel.org/stable/c/f98b7f85e04b40e28b08c461ded0cc79f14f5509
git.kernel.orghttps://git.kernel.org/stable/c/82664d0f1ba25e4f9a71994954abae24c60f4067
git.kernel.orghttps://git.kernel.org/stable/c/b130a6eefa02bd4d475f2f059da8bcfb3e7d18d9
git.kernel.orghttps://git.kernel.org/stable/c/938867e870fb5471bb16f442aeac81326e05bf65
git.kernel.orghttps://git.kernel.org/stable/c/392cc1d8408b5665215c1e9290bbf0f92339b043
git.kernel.orghttps://git.kernel.org/stable/c/4b2b4d7d4e203c92db8966b163edfacb1f0e1e29

01 Record index

CVE-2026-52920

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2026-52920

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References