CVE-2026-72051
net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
In the Linux kernel, the following vulnerability has been resolved: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink ip6_tnl_changelink() operates on at most two netns, dev_net(dev) and the tunnel link netns t->net. They differ once the device is created in or moved to a netns other than the one the request runs in. The rtnl changelink path checks CAP_NET_ADMIN only against dev_net(dev), so a caller privileged there but not in t->net can rewrite a tunnel that lives in t->net. Gate ip6_tnl_changelink() on rtnl_dev_link_net_capable() at its top, before any attribute is parsed.
| Vendor | linux |
| Product | linux |
| Ecosystems | |
| Industries | Technology |
| Published | Aug 15, 2026 |
Stay Ahead of the Next One
Get instant alerts for linux linux
Be the first to know when new unknown vulnerabilities affecting linux linux are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Linux / Linux
0bd8762824e73a3cce7b7560a97463301764b616 < 2636d061bc237a2446a146e42dcc6563acfa7432 0bd8762824e73a3cce7b7560a97463301764b616 < 7f68f7928484f463a5bc0d50e6fdd8d16f55a5aa 0bd8762824e73a3cce7b7560a97463301764b616 < 234cd54fc500f69db43e37de38603da617fbbeea 0bd8762824e73a3cce7b7560a97463301764b616 < d4bcc202a3530c856e1cb183384bc9cc8fddab22 0bd8762824e73a3cce7b7560a97463301764b616 < 2496fa0b7d180b3ad356b514e7ff93bb14e6140a
Linux / Linux
3.12
References
git.kernel.org: https://git.kernel.org/stable/c/2636d061bc237a2446a146e42dcc6563acfa7432 git.kernel.org: https://git.kernel.org/stable/c/7f68f7928484f463a5bc0d50e6fdd8d16f55a5aa git.kernel.org: https://git.kernel.org/stable/c/234cd54fc500f69db43e37de38603da617fbbeea git.kernel.org: https://git.kernel.org/stable/c/d4bcc202a3530c856e1cb183384bc9cc8fddab22 git.kernel.org: https://git.kernel.org/stable/c/2496fa0b7d180b3ad356b514e7ff93bb14e6140a