CVE-2026-72054

In the Linux kernel, the following vulnerability has been resolved: net: ipvti: require CAPNETADMIN in the device netns for changelink vtichangelink operates on at most two netns, devnetdev and the tunnel link netns t-net. They differ once the device is created in or moved to a netns other than t...

CVE-2026-72054

CVE-2026-72054 concerns the Linux kernel’s net/vti changelink operation. The root cause is that vti_changelink() validated CAP_NET_ADMIN against the device netns (dev_net) but not against the tunnel’s netns (t->net), allowing a caller privileged in dev_net but not in t->net to rewrite a tun...