CVE-2026-72052: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink
In the Linux kernel, the following vulnerability has been resolved:
net: ip6gre: require CAPNETADMIN in the device netns for changelink
ip6grechangelink() and ip6erspanchangelink() operate on at most two netns, devnet(dev) and the tunnel link netns t->net. They differ once the device is created in or moved to a netns other than the one the request runs in. The rtnl changelink path checks CAPNETADMIN only against devnet(dev), so a caller privileged there but not in t->net can rewrite a tunnel that lives in t->net.
Gate both ops on rtnldevlinknetcapable() at their top, before any attribute is parsed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-72052?
CVE-2026-72052 has a risk score of 47, indicating a significant vulnerability in the Linux kernel.
How do I fix CVE-2026-72052?
To fix CVE-2026-72052, ensure you are running an updated version of the Linux kernel where this issue has been resolved.
What components are affected by CVE-2026-72052?
CVE-2026-72052 affects the ip6_gre and ip6erspan functionalities of the Linux kernel.
What type of access is required to exploit CVE-2026-72052?
Exploitation of CVE-2026-72052 requires CAP_NET_ADMIN capabilities in the network namespace.
When was CVE-2026-72052 published?
CVE-2026-72052 was published on August 15, 2026.