Linux Distros Unpatched Vulnerability : CVE-2026-72051

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ip6tunnel: require CAPNETADMIN in the device netns for changelink ip6tnlchangelink operates on at most two netns, devnetdev and the tunnel link netns t-net...

PT-2026-72681

In the Linux kernel, the following vulnerability has been resolved: net: serialize netif running check in enqueue to backlog Syzbot reported a KASAN slab-use-after-free in fib rules lookup. The root cause is a race condition where packets can escape the backlog flushing during device unregistrati...

PT-2026-72244

In the Linux kernel, the following vulnerability has been resolved: net: ip6 vti: require CAP NET ADMIN in the device netns for changelink vti6 changelink operates on at most two netns, dev netdev and the tunnel link netns t-net. They differ once the device is created in or moved to a netns other...

PT-2026-72306

In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix data race on rx stamp/rx ifindex in bcm rx handler For an rx op subscribed on all interfaces ifindex == 0, the same op is registered once in the shared per-netns wildcard filter list, so bcm rx handler can run...

PT-2026-72863

In the Linux kernel, the following vulnerability has been resolved: afs: Fix netns teardown to cancel the preallocation charger Fix the teardown of an afs network namespace to make sure it cancels the work item that keeps the preallocated rxrpc call/conn/peer queue charged before incoming calls a...

Linux Distros Unpatched Vulnerability : CVE-2026-72053

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ipip: require CAPNETADMIN in the device netns for changelink ipipchangelink operates on at most two netns, devnetdev and the tunnel link netns t-net. They...

PT-2026-72240

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ip6 tnl changelink function where the system fails to properly verify permissions across different network namespaces netns. The rtnl changelink path only checks f...

PT-2026-72242

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ipip changelink function where the system fails to properly verify permissions across different network namespaces netns. The process only checks for CAP NET ADMIN...

PT-2026-72324

In the Linux kernel, the following vulnerability has been resolved: xfrm: xfrm interface: require CAP NET ADMIN in the device netns for changelink xfrmi changelink operates on at most two netns, dev netdev and the interface link netns xi-net. They differ once the device is created in or moved to ...

PT-2026-72241

In the Linux kernel, the following vulnerability has been resolved: net: ip6 gre: require CAP NET ADMIN in the device netns for changelink ip6gre changelink and ip6erspan changelink operate on at most two netns, dev netdev and the tunnel link netns t-net. They differ once the device is created in...

PT-2026-72250

In the Linux kernel, the following vulnerability has been resolved: net: sit: require CAP NET ADMIN in the device netns for changelink ipip6 changelink operates on at most two netns, dev netdev and the tunnel link netns t-net. They differ once the device is created in or moved to a netns other th...

CVE-2026-68432

In the Linux kernel, the following vulnerability has been resolved: vxlan: require CAPNETADMIN in the device netns for changelink A tunnel changelink operates on at most two netns, devnetdev and the sticky underlay netns vxlan-net. They differ once the device is created in or moved to a netns oth...

CVE-2026-68432

Summary: CVE-2026-68432 affects the Linux kernel VXLAN implementation. The bug arises from an incorrect privilege check in the rtnl changelink path: a process with CAP_NET_ADMIN in its own network namespace can rewrite a VXLAN device whose underlay lives in a different namespace. The affected cod...

CVE-2026-68432

In the Linux kernel, the following vulnerability has been resolved: vxlan: require CAPNETADMIN in the device netns for changelink A tunnel changelink operates on at most two netns, devnetdev and the sticky underlay netns vxlan-net. They differ once the device is created in or moved to a netns oth...

EUVD-2026-57040

In the Linux kernel, the following vulnerability has been resolved: vxlan: require CAPNETADMIN in the device netns for changelink A tunnel changelink operates on at most two netns, devnetdev and the sticky underlay netns vxlan-net. They differ once the device is created in or moved to a netns oth...

CVE-2026-68432

In the Linux kernel, the following vulnerability has been resolved: vxlan: require CAPNETADMIN in the device netns for changelink A tunnel changelink operates on at most two netns, devnetdev and the sticky underlay netns vxlan-net. They differ once the device is created in or moved to a netns oth...

CVE-2026-68432 vxlan: require CAP_NET_ADMIN in the device netns for changelink

In the Linux kernel, the following vulnerability has been resolved: vxlan: require CAPNETADMIN in the device netns for changelink A tunnel changelink operates on at most two netns, devnetdev and the sticky underlay netns vxlan-net. They differ once the device is created in or moved to a netns oth...

Linux Distros Unpatched Vulnerability : CVE-2026-68432

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vxlan: require CAPNETADMIN in the device netns for changelink A tunnel changelink operates on at most two netns, devnetdev and the sticky underlay netns...

CVE-2026-68162

A flaw was found in the Stream Control Transmission Protocol SCTP implementation within the Linux kernel. This Use-After-Free UAF vulnerability occurs during network namespace netns teardown. A local attacker with the ability to open a sysctl file could exploit this flaw, potentially leading to a...

CVE-2026-68161

A flaw was found in the Linux kernel's SCTP Stream Control Transmission Protocol implementation. When a network namespace netns is torn down, the associated SCTP UDP User Datagram Protocol tunnel sockets are not properly closed. This oversight can lead to a resource leak, potentially resulting in...