{"id":"CVE-2026-52920","revision":"8d80cd1577844c1d8d6702ca1df8767e","records":[{"revision":"8d80cd1577844c1d8d6702ca1df8767e","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-52920","aliases":[],"title":"netfilter: xt_policy: fix strict mode inbound policy matching","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: xt_policy: fix strict mode inbound policy matching\n\nmatch_policy_in() walks sec_path entries from the last transform to the\nfirst one, but strict policy matching needs to consume info->pol[] in\nthe same forward order as the rule layout.\n\nDerive the strict-match policy position from the number of transforms\nalready consumed so that multi-element inbound rules are matched\nconsistently.","state":0,"publishedAt":"2026-06-24T07:14:15.866+00:00","modifiedAt":"2026-10-19T19:37:00.676+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"net/netfilter/xt_policy.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"c4b885139203d37f76662c37ae645fe8e0f4e4e5\",\n                            \"lessThan\": \"eb323f7b82d2e2f638de0cc2a177803eb20e0707\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"c4b885139203d37f76662c37ae645fe8e0f4e4e5\",\n                            \"lessThan\": \"fc1c518bb1f054831ecabb32da9b8e1dff9699c6\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"c4b885139203d37f76662c37ae645fe8e0f4e4e5\",\n                            \"lessThan\": \"f98b7f85e04b40e28b08c461ded0cc79f14f5509\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"c4b885139203d37f76662c37ae645fe8e0f4e4e5\",\n                            \"lessThan\": \"82664d0f1ba25e4f9a71994954abae24c60f4067\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"c4b885139203d37f76662c37ae645fe8e0f4e4e5\",\n                            \"lessThan\": \"b130a6eefa02bd4d475f2f059da8bcfb3e7d18d9\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"c4b885139203d37f76662c37ae645fe8e0f4e4e5\",\n                            \"lessThan\": \"938867e870fb5471bb16f442aeac81326e05bf65\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"c4b885139203d37f76662c37ae645fe8e0f4e4e5\",\n                            \"lessThan\": \"392cc1d8408b5665215c1e9290bbf0f92339b043\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"c4b885139203d37f76662c37ae645fe8e0f4e4e5\",\n                            \"lessThan\": \"4b2b4d7d4e203c92db8966b163edfacb1f0e1e29\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"net/netfilter/xt_policy.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"2.6.17\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"2.6.17\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.258\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.209\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.175\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.141\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.91\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.33\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.0.10\",\n                            \"lessThanOrEqual\": \"7.0.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.1\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H","score":8.3,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/eb323f7b82d2e2f638de0cc2a177803eb20e0707","https://git.kernel.org/stable/c/fc1c518bb1f054831ecabb32da9b8e1dff9699c6","https://git.kernel.org/stable/c/f98b7f85e04b40e28b08c461ded0cc79f14f5509","https://git.kernel.org/stable/c/82664d0f1ba25e4f9a71994954abae24c60f4067","https://git.kernel.org/stable/c/b130a6eefa02bd4d475f2f059da8bcfb3e7d18d9","https://git.kernel.org/stable/c/938867e870fb5471bb16f442aeac81326e05bf65","https://git.kernel.org/stable/c/392cc1d8408b5665215c1e9290bbf0f92339b043","https://git.kernel.org/stable/c/4b2b4d7d4e203c92db8966b163edfacb1f0e1e29"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-52920","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-52920","identifiers":["CVE-2026-52920"]},"retained":false,"historicalAffected":[]}],"coverage":[]}