CVE-2026-72054: net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink
In the Linux kernel, the following vulnerability has been resolved:
net: ipvti: require CAPNETADMIN in the device netns for changelink
vtichangelink() operates on at most two netns, devnet(dev) and the tunnel link netns t->net. They differ once the device is created in or moved to a netns other than the one the request runs in. The rtnl changelink path checks CAPNETADMIN only against devnet(dev), so a caller privileged there but not in t->net can rewrite a tunnel that lives in t->net.
Gate vtichangelink() on rtnldevlinknetcapable() at its top, before any attribute is parsed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-72054?
CVE-2026-72054 has a risk rating of 40, indicating a moderate level of severity.
How do I fix CVE-2026-72054?
To fix CVE-2026-72054, ensure you are using a patched version of the Linux kernel that addresses this vulnerability.
What systems are affected by CVE-2026-72054?
CVE-2026-72054 affects systems running the Linux kernel with vulnerabilities in the net: ip_vti module.
What mitigations can I apply for CVE-2026-72054?
Mitigations for CVE-2026-72054 include restricting CAP_NET_ADMIN permissions in device network namespaces.
When was CVE-2026-72054 published?
CVE-2026-72054 was published on August 15, 2026.