What is CVE-2026-52920?

CVE-2026-52920 is a High severity Linux kernel vulnerability with a CVSS score of 8.3 out of 10, affecting Linux kernel versions from 2.6.17 onward and patched in 5.10.258, 5.15.209, 6.1.175 and others. CVE-2026-52920 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2026-52920?

CVE-2026-52920 has a CVSS score of 8.3 out of 10, rated High severity. The vector string is CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H.

Is there a patch available for CVE-2026-52920?

Yes, CVE-2026-52920 has been patched. Fixed versions include 5.10.258, 5.15.209, 6.1.175 and others. If you are running Linux kernel 2.6.17 or later up to the fix versions, apply the relevant patch for your kernel branch.

Is CVE-2026-52920 actively exploited?

CVE-2026-52920 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2026-52920

High

In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_policy: fix strict mode inbound policy matching match_policy_in() walks sec_path entries from the last transform to the first one, but strict policy matching needs to consume info->pol[] in the same forward order as the rule layout. Derive the strict-match policy position from the number of transforms already consumed so that multi-element inbound rules are matched consistently.

Package Linux Kernel

Published 2026-06-24

Last modified 2026-07-08

CVSS version 3.1

Patch available

Yes

CVSS 3.1 score

8.3

out of 10

High

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

Low

Availability

High

Vector string

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H

Affected versions

Linux kernel versions 2.6.17 and later are affected. Fixed in 5.10.258, 5.15.209, 6.1.175, 6.6.141, 6.12.91, 6.18.33, 7.0.10, 7.1 and their respective stable series.

Affected from

≥ 2.6.17

Fixed in

✓ 5.10.258 5.10.x ✓ 5.15.209 5.15.x ✓ 6.1.175 6.1.x ✓ 6.6.141 6.6.x ✓ 6.12.91 6.12.x ✓ 6.18.33 6.18.x ✓ 7.0.10 7.0.x ✓ 7.1

References

8 total

Kernel Git
https://git.kernel.org/stable/c/392cc1d8408b5665215c1e9290bbf0f92339b043

Patch
Kernel Git
https://git.kernel.org/stable/c/4b2b4d7d4e203c92db8966b163edfacb1f0e1e29

Patch
Kernel Git
https://git.kernel.org/stable/c/82664d0f1ba25e4f9a71994954abae24c60f4067

Patch
Kernel Git
https://git.kernel.org/stable/c/938867e870fb5471bb16f442aeac81326e05bf65

Patch
Kernel Git
https://git.kernel.org/stable/c/b130a6eefa02bd4d475f2f059da8bcfb3e7d18d9

Patch

Showing 5 of 8 references View all on NVD

Details

CVE ID CVE-2026-52920

Severity High

CVSS score 8.3 / 10

CVSS version 3.1

Published 2026-06-24

Modified 2026-07-08

KEV No

Patch

Yes

Package linux

Frequently asked questions

What is CVE-2026-52920?

CVE-2026-52920 is a High severity Linux kernel vulnerability with a CVSS score of 8.3 out of 10 . It affects Linux kernel versions from 2.6.17 onward and has been patched in 5.10.258, 5.15.209, 6.1.175 and others. CVE-2026-52920 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
What is the CVSS score for CVE-2026-52920?

CVE-2026-52920 has a CVSS score of 8.3 out of 10, rated High severity (CVSS 3.1). The vector string is CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H.
Is there a patch available for CVE-2026-52920?

Yes. CVE-2026-52920 has been patched. Fixed versions include 5.10.258, 5.15.209, 6.1.175 and others. If you are running Linux kernel 2.6.17 or later up to the fix versions, apply the relevant patch for your kernel branch.
Is CVE-2026-52920 actively exploited?

No. CVE-2026-52920 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.