CVE-2026-72061

A flaw was found in the Linux kernel. An incorrect permission check in the ipip6changelink function, which manages IPv6 over IPv4 SIT tunnels, allows a local attacker to bypass intended security restrictions. A user with administrative capabilities CAPNETADMIN in one network namespace a virtualiz...

CVE-2026-72061

The CVE refers to a Linux kernel vulnerability where net: sit requires CAP_NET_ADMIN in the device netns for changelink. ipip6_changelink() can operate across at most two netnamespaces (dev_net(dev) and the tunnel link netns t->net), which may differ if a device is created or moved to another ...