Wind River Support Network

HomeDefectsLIN1025-15909

Fixed

LIN1025-15909 : Security Advisory - linux - CVE-2026-52920

Created: Jun 25, 2026 Updated: Jul 31, 2026

Resolved Date: Jul 31, 2026

Found In Version: 10.25.33.2

Severity: Standard

Applicable for: Wind River Linux LTS 25

Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:  netfilter: xt_policy: fix strict mode inbound policy matching  match_policy_in() walks sec_path entries from the last transform to the first one, but strict policy matching needs to consume info->pol[] in the same forward order as the rule layout.  Derive the strict-match policy position from the number of transforms already consumed so that multi-element inbound rules are matched consistently.

CVEs

CVE-2026-52920