CVE-2026-72053: net: ipip: require CAP_NET_ADMIN in the device netns for changelink
In the Linux kernel, the following vulnerability has been resolved:
net: ipip: require CAPNETADMIN in the device netns for changelink
ipipchangelink() operates on at most two netns, devnet(dev) and the tunnel link netns t->net. They differ once the device is created in or moved to a netns other than the one the request runs in. The rtnl changelink path checks CAPNETADMIN only against devnet(dev), so a caller privileged there but not in t->net can rewrite a tunnel that lives in t->net.
Gate ipipchangelink() on rtnldevlinknetcapable() at its top, before any attribute is parsed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-72053?
The severity of CVE-2026-72053 is rated at 34.
How does CVE-2026-72053 affect the Linux kernel?
CVE-2026-72053 affects the Linux kernel by requiring CAP_NET_ADMIN permissions for certain operations in net namespaces.
How can I mitigate the risk associated with CVE-2026-72053?
Mitigation for CVE-2026-72053 involves ensuring that users operating in net namespaces have the necessary CAP_NET_ADMIN capabilities.
What versions of the Linux kernel are affected by CVE-2026-72053?
CVE-2026-72053 affects specific versions of the Linux kernel where the vulnerability has been identified and resolved.
Is there a patch available for CVE-2026-72053?
Yes, a patch for CVE-2026-72053 has been made available in the stable Linux kernel updates.