CVE-2026-52920

The CVE-2026-52920 entry documents a Linux kernel netfilter xt_policy issue where strict mode inbound policy matching could misalign due to the incorrect consumption order of policy entries. Specifically, match_policy_in() walked sec_path entries from the last transform to the first, requiring co...

EUVD-2026-38723

In the Linux kernel, the following vulnerability has been resolved: netfilter: xtpolicy: fix strict mode inbound policy matching matchpolicyin walks secpath entries from the last transform to the first one, but strict policy matching needs to consume info-pol in the same forward order as the rule...