CVE-2026-45932
High
Description
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix tcx/netkit detach permissions when prog fd isn't given This commit fixes a security issue where BPF_PROG_DETACH on tcx or netkit devices could be executed by any user when no program fd was provided, bypassing permission checks. The fix adds a capability check for CAP_NET_ADMIN or CAP_SYS_ADMIN in this case.
SeverityHigh
CVSS7.3
Exploit probability—
Product
Linux Kernel
PublishedMay 27, 2026
First seenMay 27, 2026
How to fix
Update
- linux linux_kernel6.18.14, 6.19.4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 6.6 ≤ v < 6.18.14, 6.19 ≤ v < 6.19.4 | 6.18.14, 6.19.4 |
| microsoft azl3_kernel_6.6.139.1-1 | No range specified | — |
| microsoft azl3_kernel_6.6.143.1-1 | No range specified | — |
| microsoft azl3_kernel_6.6.141.1-1 | No range specified | — |
| microsoft azl3_kernel_6.6.144.1-1 | No range specified | — |
| microsoft azl3_kernel_6.6.145.2-1 | No range specified | — |
| microsoft azl3_kernel_6.6.150.1-1 | No range specified | — |
| microsoft azl3_kernel_6.6.152.1-1 | No range specified | — |
| microsoft azl3_kernel_6.6.157.1-1 | No range specified | — |
| microsoft azl3_kernel_6.6.159.1-1 | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.