CVE-2026-72052
Received Received - Intake

BaseFortify

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink ip6gre_changelink() and ip6erspan_changelink() operate on at most two netns, dev_net(dev) and the tunnel link netns t->net. They differ once the device is created in or moved to a netns other than the one the request runs in. The rtnl changelink path checks CAP_NET_ADMIN only against dev_net(dev), so a caller privileged there but not in t->net can rewrite a tunnel that lives in t->net. Gate both ops on rtnl_dev_link_net_capable() at their top, before any attribute is parsed.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-72052
EUVD
EUVD-2026-59010

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves insufficient permission checks in the IP6GRE (IPv6 Generic Routing Encapsulation) module. Specifically, functions ip6gre_changelink() and ip6erspan_changelink() allow users with CAP_NET_ADMIN privileges in one network namespace to modify tunnels in another namespace where they lack privileges.

Detection Guidance

This vulnerability involves insufficient capability checks in the Linux kernel's IP6GRE and IP6ERSPAN tunnel operations. Detection requires checking kernel versions and examining network namespace configurations for tunnels. Use 'uname -a' to check kernel version and 'ip netns list' to view network namespaces. Look for tunnels with 'ip -6 tunnel show' and verify CAP_NET_ADMIN privileges in relevant namespaces.

Impact Analysis

An attacker with CAP_NET_ADMIN in a network namespace could exploit this to alter or disrupt network tunnels in other namespaces, potentially causing network misconfigurations, unauthorized access, or denial of service.

Mitigation Strategies

Immediate mitigation involves updating the Linux kernel to a patched version that includes the fix for this issue. Monitor vendor advisories for kernel updates addressing CVE-2026-72052. Avoid creating or modifying IP6GRE/IP6ERSPAN tunnels until the kernel is updated. If tunnels must be managed, ensure all operations are performed with CAP_NET_ADMIN privileges in the correct network namespace.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-72052. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart