CVE-2026-72055
Received Received - Intake

BaseFortify

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink vti6_changelink() operates on at most two netns, dev_net(dev) and the tunnel link netns t->net. They differ once the device is created in or moved to a netns other than the one the request runs in. The rtnl changelink path checks CAP_NET_ADMIN only against dev_net(dev), so a caller privileged there but not in t->net can rewrite a tunnel that lives in t->net. Gate vti6_changelink() on rtnl_dev_link_net_capable() at its top, before any attribute is parsed.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-72055
EUVD
EUVD-2026-59013

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a missing capability check in the vti6_changelink() function. It allows a user with CAP_NET_ADMIN privileges in one network namespace to modify a tunnel device located in a different network namespace without proper authorization. The issue arises because the function only verifies privileges in the device's network namespace but not in the tunnel's network namespace.

Detection Guidance

This vulnerability requires CAP_NET_ADMIN privileges in the device's network namespace. Detection involves checking for unauthorized changes to ip6_vti tunnel configurations. Inspect kernel logs for suspicious netlink operations or unauthorized CAP_NET_ADMIN usage in tunnel contexts. Use commands like 'ip -6 tunnel show' to list active tunnels and 'dmesg | grep vti6' to check for related kernel messages.

Impact Analysis

An attacker with CAP_NET_ADMIN privileges in a network namespace could exploit this to modify or disrupt network tunnels in other namespaces. This could lead to unauthorized network configuration changes, potential denial-of-service conditions, or interception of network traffic passing through affected tunnels.

Compliance Impact

This vulnerability could impact compliance by allowing unauthorized network modifications that violate data protection requirements. GDPR and HIPAA mandate strict network security controls to protect sensitive data. Exploitation could lead to unauthorized access or data breaches, potentially resulting in regulatory penalties or loss of compliance certifications.

Mitigation Strategies

Apply the latest Linux kernel patches to resolve this issue. Restrict CAP_NET_ADMIN privileges to trusted users. Monitor network namespace changes and tunnel configurations for anomalies. Disable unused ip6_vti tunnels if not required.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-72055. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart