CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls
In the Linux kernel, the following vulnerability has been resolved:
s390/qeth: Check CAPNETADMIN for private ioctls
Gate the SIOCDEVPRIVATE ioctl commands SIOCQETHADPSETSNMPCONTROL, SIOCQETHGETCARDTYPE and SIOCQETHQUERYOAT with CAPNETADMIN capable check to ensure unprivileged users cannot invoke them.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Gate the SIOCDEVPRIVATE ioctl commands SIOC_QETH_ADP_SET_SNMP_CONTROL, SIOC_QETH_GET_CARD_TYPE, and SIOC_QETH_QUERY_OAT so they are accessible only to callers with CAP_NET_ADMIN; unprivileged users must be prevented from invoking them.
Linux kernel (s390/qeth) Capability check for private ioctls (SIOC_QETH_ADP_SET_SNMP_CONTROL, SIOC_QETH_GET_CARD_TYPE, SIOC_QETH_QUERY_OAT) = Require CAP_NET_ADMIN
Event History
Frequently Asked Questions
What is the severity of CVE-2026-74467?
The severity of CVE-2026-74467 is categorized with a risk score of 27.
How do I fix CVE-2026-74467?
To fix CVE-2026-74467, ensure that your Linux kernel version is updated to include the patch that checks CAP_NET_ADMIN for private ioctls.
What systems are affected by CVE-2026-74467?
CVE-2026-74467 affects the Linux kernel specifically related to the s390/qeth component.
What does CVE-2026-74467 vulnerability exploit?
CVE-2026-74467 exploits a failure to check for CAP_NET_ADMIN capabilities on private ioctl commands.
When was CVE-2026-74467 published?
CVE-2026-74467 was published on August 15, 2026.