A critical kernel vulnerability in SUSE Linux Enterprise Server 12 SP5 renders firewall rules ineffective, potentially exposing the host to unauthorized network access.

This is an improper access control flaw (CWE-284) within the Linux kernel that specifically breaks nftables functionality. The vulnerability is exploitable by an unauthenticated remote attacker.

The failure of firewall rules presents a significant security risk, as it effectively removes the network perimeter defense for the affected server. Given the CVSS score of 7.3, this high-severity issue could lead to unauthorized system access, data exfiltration, or total compromise of the host system.

Immediate Action: Monitor the SUSE Bugzilla portal and vendor security bulletins for the release of a kernel patch, and apply it immediately upon availability.

Proactive Monitoring: Audit system logs for unexpected network connections and verify the active status of firewall rules using the nft command line interface regularly.

Compensating Controls: Implement network-level access control lists on upstream hardware firewalls or switches to restrict traffic to the affected server until the kernel is patched.

Public Exploit Available: No (exploit_available: unknown)

This vulnerability represents a substantial risk to infrastructure integrity due to the complete bypass of local firewall policies. Security teams must treat this as a high-priority item and ensure that affected systems are isolated or protected by external network controls until a vendor-supplied kernel update is deployed to restore nftables functionality.