8.8

CVE-2026-72053

net: ipip: require CAP_NET_ADMIN in the device netns for changelink

In the Linux kernel, the following vulnerability has been resolved:

net: ipip: require CAP_NET_ADMIN in the device netns for changelink

ipip_changelink() operates on at most two netns, dev_net(dev) and the
tunnel link netns t->net. They differ once the device is created in or
moved to a netns other than the one the request runs in. The rtnl
changelink path checks CAP_NET_ADMIN only against dev_net(dev), so a
caller privileged there but not in t->net can rewrite a tunnel that
lives in t->net.

Gate ipip_changelink() on rtnl_dev_link_net_capable() at its top,
before any attribute is parsed.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 6c742e714d8c282fd8f8b22d3e20b5141738c1ee
Version < a7d2642a50282322bc33f34ee7305f2b793df494
Status affected
Version 6c742e714d8c282fd8f8b22d3e20b5141738c1ee
Version < 068ad9b85f681755f751ebab82ae98146cec163d
Status affected
Version 6c742e714d8c282fd8f8b22d3e20b5141738c1ee
Version < 91571643e554ae89a91942380d5f5361fb7060a2
Status affected
Version 6c742e714d8c282fd8f8b22d3e20b5141738c1ee
Version < 983cc4aa7e6f633b34c3ee743771252d7afa9a90
Status affected
Version 6c742e714d8c282fd8f8b22d3e20b5141738c1ee
Version < 26544021d5c49cc6ae8a968ccb5033e6363854a4
Status affected
Version 6c742e714d8c282fd8f8b22d3e20b5141738c1ee
Version < 68cadc3698c7de88966d306d12ec9c6217da228a
Status affected
Version 6c742e714d8c282fd8f8b22d3e20b5141738c1ee
Version < d49edcc65e0a37cc9b386a94415c5d6670ca8b71
Status affected
Version 6c742e714d8c282fd8f8b22d3e20b5141738c1ee
Version < 8211a26324667980a463c069469a818e71207e02
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 3.12
Status affected
Version 0
Version < 3.12
Status unaffected
Version <= 5.10.*
Version 5.10.266
Status unaffected
Version <= 5.15.*
Version 5.15.217
Status unaffected
Version <= 6.1.*
Version 6.1.178
Status unaffected
Version <= 6.6.*
Version 6.6.145
Status unaffected
Version <= 6.12.*
Version 6.12.97
Status unaffected
Version <= 6.18.*
Version 6.18.40
Status unaffected
Version <= 7.1.*
Version 7.1.5
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.16% 0.061
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 8.8 2 6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/91571643e554ae89a91942380d5f5361fb7060a2
https://git.kernel.org/stable/c/983cc4aa7e6f633b34c3ee743771252d7afa9a90
https://git.kernel.org/stable/c/26544021d5c49cc6ae8a968ccb5033e6363854a4
https://git.kernel.org/stable/c/68cadc3698c7de88966d306d12ec9c6217da228a
https://git.kernel.org/stable/c/d49edcc65e0a37cc9b386a94415c5d6670ca8b71
https://git.kernel.org/stable/c/8211a26324667980a463c069469a818e71207e02
https://git.kernel.org/stable/c/068ad9b85f681755f751ebab82ae98146cec163d
https://git.kernel.org/stable/c/a7d2642a50282322bc33f34ee7305f2b793df494