CVE-2026-72053

CVE-2026-72053 affects the Linux kernel net/ipip subsystem. The vulnerability arises because ipip_changelink() validates CAP_NET_ADMIN only in the device’s netns (dev_net(dev)) and not in the tunnel’s netns (t->net). A caller with privileges in the device netns but not in the tunnel netns coul...