CVE-2026-52909

Analyzed Analyzed - Analysis Complete

ip6_vti Fallback Device Netns Immutable Flag Missing

Publication date: 2026-06-19

Last updated on: 2026-07-08

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: ip6_vti: set netns_immutable on the fallback device. john1988 and Noam Rathaus reported that vti6_init_net() does not set the netns_immutable flag on the per-netns fallback tunnel device (ip6_vti0). Other similar tunnel drivers (like ip6_tunnel, sit, ip6_gre, and ip_tunnel) correctly set this flag during their fallback device initialization to prevent them from being moved to another network namespace.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-19

Last Modified

2026-07-08

Generated

2026-07-10

AI Q&A

2026-06-19

EPSS Evaluated

2026-07-08

NVD

CVE-2026-52909

EUVD

EUVD-2026-38033

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	From 6.13 (inc) to 6.18.36 (exc)
linux	linux_kernel	From 6.19 (inc) to 7.0.13 (exc)
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	From 5.16 (inc) to 6.1.177 (exc)
linux	linux_kernel	From 6.2 (inc) to 6.6.144 (exc)
linux	linux_kernel	From 6.7 (inc) to 6.12.95 (exc)
linux	linux_kernel	From 5.11 (inc) to 5.15.211 (exc)
linux	linux_kernel	From 3.15 (inc) to 5.10.260 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability exists in the Linux kernel's handling of the ip6_vti (IPv6 Virtual Tunnel Interface). Specifically, the function vti6_init_net() does not set the netns_immutable flag on the per-network namespace fallback tunnel device (ip6_vti0).

Other similar tunnel drivers such as ip6_tunnel, sit, ip6_gre, and ip_tunnel correctly set this flag during their fallback device initialization. The netns_immutable flag prevents the fallback device from being moved to another network namespace.

Because ip6_vti0 did not have this flag set, it could potentially be moved between network namespaces, which is unintended behavior and considered a vulnerability.

Impact Analysis

The vulnerability could allow the fallback tunnel device (ip6_vti0) to be moved to a different network namespace than intended. This could lead to unexpected network behavior or security issues related to network isolation.

Since network namespaces are used to isolate network environments, the ability to move a device between namespaces could undermine this isolation, potentially allowing unauthorized access or interference between network namespaces.

Hi! I’m here to help you understand CVE-2026-52909. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70