CVE-2026-72055 net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink

In the Linux kernel, the following vulnerability has been resolved: net: ip6vti: require CAPNETADMIN in the device netns for changelink vti6changelink operates on at most two netns, devnetdev and the tunnel link netns t-net. They differ once the device is created in or moved to a netns other than...

CVE-2026-72055 net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink

In the Linux kernel, the following vulnerability has been resolved: net: ip6vti: require CAPNETADMIN in the device netns for changelink vti6changelink operates on at most two netns, devnetdev and the tunnel link netns t-net. They differ once the device is created in or moved to a netns other than...

CVE-2026-72055

The CVE-2026-72055 entry concerns a Linux kernel net: ip6_vti issue where vti6_changelink could be mishandled across net namespaces. The root cause is that CAP_NET_ADMIN was only checked against dev_net(dev) during the rtnl changelink path, allowing a caller with privileges in the device namespac...

CVE-2026-72054 net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink

In the Linux kernel, the following vulnerability has been resolved: net: ipvti: require CAPNETADMIN in the device netns for changelink vtichangelink operates on at most two netns, devnetdev and the tunnel link netns t-net. They differ once the device is created in or moved to a netns other than t...

CVE-2026-72054

CVE-2026-72054 concerns the Linux kernel’s net/vti changelink operation. The root cause is that vti_changelink() validated CAP_NET_ADMIN against the device netns (dev_net) but not against the tunnel’s netns (t->net), allowing a caller privileged in dev_net but not in t->net to rewrite a tun...

CVE-2026-72054 net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink

In the Linux kernel, the following vulnerability has been resolved: net: ipvti: require CAPNETADMIN in the device netns for changelink vtichangelink operates on at most two netns, devnetdev and the tunnel link netns t-net. They differ once the device is created in or moved to a netns other than t...

CVE-2026-72053 net: ipip: require CAP_NET_ADMIN in the device netns for changelink

In the Linux kernel, the following vulnerability has been resolved: net: ipip: require CAPNETADMIN in the device netns for changelink ipipchangelink operates on at most two netns, devnetdev and the tunnel link netns t-net. They differ once the device is created in or moved to a netns other than t...

CVE-2026-72053

The CVE-2026-72053 entry describes a Linux kernel vulnerability in the ipip driver related to changelink in ipip_changelink(). The issue arises because CAP_NET_ADMIN is checked only against the device’s netns (dev_net(dev)) while a tunnel can reside in a different netns (t->net), allowing a pr...

CVE-2026-72052

The CVE-2026-72052 issue affects the Linux kernel's IP6GRE/IP6ERSPAN changelink logic. Specifically, ip6gre_changelink() and ip6erspan_changelink() could be manipulated if a caller is privileged in dev_net(dev) but not in the tunnel’s netns (t->net). The vulnerability arises because the rtnl c...

EUVD-2026-59010

In the Linux kernel, the following vulnerability has been resolved: net: ip6gre: require CAPNETADMIN in the device netns for changelink ip6grechangelink and ip6erspanchangelink operate on at most two netns, devnetdev and the tunnel link netns t-net. They differ once the device is created in or...

CVE-2026-72052 net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink

In the Linux kernel, the following vulnerability has been resolved: net: ip6gre: require CAPNETADMIN in the device netns for changelink ip6grechangelink and ip6erspanchangelink operate on at most two netns, devnetdev and the tunnel link netns t-net. They differ once the device is created in or...

CVE-2026-72053 net: ipip: require CAP_NET_ADMIN in the device netns for changelink

In the Linux kernel, the following vulnerability has been resolved: net: ipip: require CAPNETADMIN in the device netns for changelink ipipchangelink operates on at most two netns, devnetdev and the tunnel link netns t-net. They differ once the device is created in or moved to a netns other than t...

EUVD-2026-59011

In the Linux kernel, the following vulnerability has been resolved: net: ipip: require CAPNETADMIN in the device netns for changelink ipipchangelink operates on at most two netns, devnetdev and the tunnel link netns t-net. They differ once the device is created in or moved to a netns other than t...

CVE-2026-72051 net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink

In the Linux kernel, the following vulnerability has been resolved: net: ip6tunnel: require CAPNETADMIN in the device netns for changelink ip6tnlchangelink operates on at most two netns, devnetdev and the tunnel link netns t-net. They differ once the device is created in or moved to a netns other...

CVE-2026-72051 net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink

In the Linux kernel, the following vulnerability has been resolved: net: ip6tunnel: require CAPNETADMIN in the device netns for changelink ip6tnlchangelink operates on at most two netns, devnetdev and the tunnel link netns t-net. They differ once the device is created in or moved to a netns other...

EUVD-2026-59009

In the Linux kernel, the following vulnerability has been resolved: net: ip6tunnel: require CAPNETADMIN in the device netns for changelink ip6tnlchangelink operates on at most two netns, devnetdev and the tunnel link netns t-net. They differ once the device is created in or moved to a netns other...

PT-2026-72243

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ip vti module where the vti changelink function does not properly verify permissions across different network namespaces netns. The system only checks for CAP NET...

PT-2026-72244

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ip6 vti module where the vti6 changelink function does not properly verify permissions across different network namespaces netns. The system only checks for CAP NE...

PT-2026-72241

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ip6 gre module where the ip6gre changelink and ip6erspan changelink functions do not properly validate permissions across different network namespaces netns. The...

PT-2026-72242

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ipip changelink function where the system fails to properly verify permissions across different network namespaces netns. The process only checks for CAP NET ADMIN...