DEBIAN-CVE-2026-72055

In the Linux kernel, the following vulnerability has been resolved: net: ip6vti: require CAPNETADMIN in the device netns for changelink vti6changelink operates on at most two netns, devnetdev and the tunnel link netns t-net. They differ once the device is created in or moved to a netns other than...

CVE-2026-72055

The vulnerability CVE-2026-72055 affects the Linux kernel net: ip6_vti path and specifically vti6_changelink(), which allowed privilege escalation by a caller with CAP_NET_ADMIN in the device netns but not in the tunnel’s netns. The issue arises because the rtnl changelink path checked CAP_NET_AD...