CVE-2026-68142

The Linux kernel vulnerability CVE-2026-68142 affects the geneve tunnel implementation. It occurs in the changelink flow for Geneve devices where the boundary of CAP_NET_ADMIN is checked only against the dev_net, allowing an attacker privileged in that netns but not in the geneve->net underlay...

EUVD-2026-55525

In the Linux kernel, the following vulnerability has been resolved: geneve: require CAPNETADMIN in the device netns for changelink A tunnel changelink operates on at most two netns, devnetdev and the sticky underlay netns geneve-net. They differ once the device is created in or moved to a netns...