EUVD-2026-59012

In the Linux kernel, the following vulnerability has been resolved: net: ipvti: require CAPNETADMIN in the device netns for changelink vtichangelink operates on at most two netns, devnetdev and the tunnel link netns t-net. They differ once the device is created in or moved to a netns other than t...

CVE-2026-72053

CVE-2026-72053 affects the Linux kernel net/ipip subsystem. The vulnerability arises because ipip_changelink() validates CAP_NET_ADMIN only in the device’s netns (dev_net(dev)) and not in the tunnel’s netns (t->net). A caller with privileges in the device netns but not in the tunnel netns coul...