Executive Summary

This vulnerability exists in the Linux kernel's net subsystem, specifically related to the PSP (Platform Security Processor) feature. The issue is that certain netlink operations, namely dev-set and key-rotate, which modify shared device state such as PSP version configuration and cryptographic key material, do not require the CAP_NET_ADMIN capability for execution.

Instead, the only access control in place is psp_dev_check_access(), which only verifies network namespace membership, not administrative privileges. This means that unprivileged users within the same network namespace could potentially perform sensitive operations that should require administrative rights.

Useful 0 Not Useful 0

Impact Analysis

Because the dev-set and key-rotate operations can be executed without proper administrative permissions, an attacker or unprivileged user within the same network namespace could modify critical device state or cryptographic keys.

This could lead to unauthorized changes in security configurations or cryptographic material, potentially compromising the security of the system or the confidentiality and integrity of communications relying on these keys.

Useful 0 Not Useful 0