CVE-2026-72051
Description
In the Linux kernel, the following vulnerability has been resolved: net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink ip6_tnl_changelink() operates on at most two netns, dev_net(dev) and the tunnel link netns t->net. They differ once the device is created in or moved to a netns other than the one the request runs in. The rtnl changelink path checks CAP_NET_ADMIN only against dev_net(dev), so a caller privileged there but not in t->net can rewrite a tunnel that lives in t->net. Gate ip6_tnl_changelink() on rtnl_dev_link_net_capable() at its top, before any attribute is parsed.
How to fix
- Linux Linux2d53ee7daabe733deb81f51d2cc90188f8ad59a1, 82e53e7281c71e174f9f5877c566a623c637b406, 5252db8fb604321133138c7069d6fc3fcd89cdee, 2636d061bc237a2446a146e42dcc6563acfa7432, 7f68f7928484f463a5bc0d50e6fdd8d16f55a5aa, 234cd54fc500f69db43e37de38603da617fbbeea, d4bcc202a3530c856e1cb183384bc9cc8fddab22, 2496fa0b7d180b3ad356b514e7ff93bb14e6140a or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 0bd8762824e73a3cce7b7560a97463301764b616 ≤ v < 2d53ee7daabe733deb81f51d2cc90188f8ad59a1, 0bd8762824e73a3cce7b7560a97463301764b616 ≤ v < 82e53e7281c71e174f9f5877c566a623c637b406, 0bd8762824e73a3cce7b7560a97463301764b616 ≤ v < 5252db8fb604321133138c7069d6fc3fcd89cdee, 0bd8762824e73a3cce7b7560a97463301764b616 ≤ v < 2636d061bc237a2446a146e42dcc6563acfa7432, 0bd8762824e73a3cce7b7560a97463301764b616 ≤ v < 7f68f7928484f463a5bc0d50e6fdd8d16f55a5aa, 0bd8762824e73a3cce7b7560a97463301764b616 ≤ v < 234cd54fc500f69db43e37de38603da617fbbeea, 0bd8762824e73a3cce7b7560a97463301764b616 ≤ v < d4bcc202a3530c856e1cb183384bc9cc8fddab22, 0bd8762824e73a3cce7b7560a97463301764b616 ≤ v < 2496fa0b7d180b3ad356b514e7ff93bb14e6140a, 3.12 | 2d53ee7daabe733deb81f51d2cc90188f8ad59a1, 82e53e7281c71e174f9f5877c566a623c637b406, 5252db8fb604321133138c7069d6fc3fcd89cdee, 2636d061bc237a2446a146e42dcc6563acfa7432, 7f68f7928484f463a5bc0d50e6fdd8d16f55a5aa, 234cd54fc500f69db43e37de38603da617fbbeea, d4bcc202a3530c856e1cb183384bc9cc8fddab22, 2496fa0b7d180b3ad356b514e7ff93bb14e6140a |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.