CVE-2026-52978: net: psp: require admin permission for dev-set and key-rotate

Q: Who can exploit this issue?

A local user who can access the affected PSP netlink operations and whose network namespace membership passes psp_dev_check_access() can modify shared device state without CAP_NET_ADMIN. The issue does not require user interaction.

Q: What can an attacker change?

The dev-set operation can change PSP version configuration, and key-rotate can change cryptographic key material. Both operations affect shared device state.

Q: Does the existing namespace access check prevent exploitation?

No. psp_dev_check_access() only verifies network-namespace membership; it does not enforce the required CAP_NET_ADMIN permission for these operations.

Published Jun 24, 2026

Updated

In the Linux kernel, the following vulnerability has been resolved:

net: psp: require admin permission for dev-set and key-rotate

The dev-set and key-rotate netlink operations modify shared device state (PSP version configuration and cryptographic key material, respectively) but do not require CAPNETADMIN. The only access control is pspdevcheckaccess() which merely verifies netns membership.

Affected Software

4 affected components

Linux Linux kernel

Linux Linux kernel>=6.18<6.18.33

Linux Linux kernel>=6.19<7.0.10

Linux Linux kernel=7.1-rc1

Event History

Jun 24, 2026

CVE Published

via MITRE·04:28 PM

Data Sourced

via MITRE·04:28 PM

Description

Data Sourced

via NVD·05:17 PM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

Who can exploit this issue?

A local user who can access the affected PSP netlink operations and whose network namespace membership passes psp_dev_check_access() can modify shared device state without CAP_NET_ADMIN. The issue does not require user interaction.

What can an attacker change?

The dev-set operation can change PSP version configuration, and key-rotate can change cryptographic key material. Both operations affect shared device state.

Does the existing namespace access check prevent exploitation?

No. psp_dev_check_access() only verifies network-namespace membership; it does not enforce the required CAP_NET_ADMIN permission for these operations.

CVE-2026-52978: net: psp: require admin permission for dev-set and key-rotate

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue?

What can an attacker change?

Does the existing namespace access check prevent exploitation?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What can an attacker change?

Does the existing namespace access check prevent exploitation?