The vulnerability of the match_policy_in() function in the net/netfilter/xt_policy.c module of the netfilter component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the matchpolicyin function in the net/netfilter/xtpolicy.c module of the netfilter component of the Linux operating system is related to an incorrect order of authentication checks before syntactic analysis and canonization. Exploiting this vulnerability could allow a remote...

kernel: netfilter: xt_policy: fix strict mode inbound policy matching

A flaw was found in the Linux kernel's netfilter component, which is responsible for network packet filtering. This vulnerability, located in the xtpolicy module, involves an error in how strict inbound network policies are matched. This could allow an attacker to bypass established security rule...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099949)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099949 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: xtpolicy: fix strict mode inbound policy matching matchpolicyin walks secpath entries...

CVE-2026-52920 netfilter: xt_policy: fix strict mode inbound policy matching

In the Linux kernel, the following vulnerability has been resolved: netfilter: xtpolicy: fix strict mode inbound policy matching matchpolicyin walks secpath entries from the last transform to the first one, but strict policy matching needs to consume info-pol in the same forward order as the rule...