CVE-2026-72061

The CVE describes a Linux kernel vulnerability in the handling of changelink for sit tunnels. ipip6_changelink() could be influenced by a caller with CAP_NET_ADMIN in the device netns but not in the tunnel’s netns (t->net) because the CAP_NET_ADMIN check was performed only against dev_net(dev)...