In the Linux kernel, the following vulnerability has been resolved:
rtnetlink: add missing netlink_ns_capable() check for peer netns
rtnl_newlink() lacks a CAP_NET_ADMIN capability check on the peer network namespace when creating paired devices (veth, vxcan, netkit). This allows an unprivileged user with a user namespace to create interfaces in arbitrary network namespaces, including init_net.
Add a netlink_ns_capable() check for CAP_NET_ADMIN in the peer namespace before allowing device creation to proceed.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libs-develUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libsUpgrade kernel-rt-develUpgrade kernel-docUpgrade perfUpgrade bpftoolUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-headersUpgrade kernel-abi-stablelistsUpgrade kernel-modules-extraUpgrade kernelUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debugUpgrade kernel-cross-headersUpgrade kernel-debug-coreUpgrade kernel-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-coreUpgrade python3-perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-core | Aug 2, 2026 | Jul 31, 2026 |
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.355-284.735Upgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.209-147.245Upgrade perf-debuginfoUpgrade perfUpgrade kernel-headersUpgrade kernel-livepatch-5.10.258-257.1041Upgrade kernel-toolsUpgrade kernel-tools-develUpgrade python-perfUpgrade kernel-devel | Jun 23, 2026 | Jun 23, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel6.12-debuginfoUpgrade perf6.12Upgrade bpftool6.12Upgrade kernel-livepatch-6.12.92-122.166Upgrade kernel6.12-tools-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-modules-extra-commonUpgrade perf6.12-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel6.12-tools-develUpgrade kernel6.12-toolsUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-develUpgrade python3-perf6.12Upgrade kernel6.12Upgrade kernel6.12-debuginfo-common-aarch64Upgrade bpftool6.12-debuginfoUpgrade kernel6.12-headers | Jun 23, 2026 | Apr 30, 2026 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 17, 2026 | Apr 30, 2026 |
| Rocky_linux | — | Upgrade kernel-debug-develUpgrade kernel-rt-debug-debuginfoUpgrade rtlaUpgrade perf-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade kernel-rt-develUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-modules-coreUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modules-coreUpgrade python3-perf-debuginfoUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-coreUpgrade kernel-debug-coreUpgrade kernel-rt-coreUpgrade kernel-develUpgrade kernel-modulesUpgrade bpftool-debuginfoUpgrade kernel-modules-extra-matchedUpgrade perfUpgrade python3-perfUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-coreUpgrade libperf-debuginfoUpgrade kernel-rtUpgrade libperfUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-debug-devel-matchedUpgrade kernelUpgrade kernel-rt-modules-extraUpgrade rvUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-kvmUpgrade kernel-debuginfo-common-s390xUpgrade bpftoolUpgrade kernel-uki-virt-addonsUpgrade kernel-toolsUpgrade kernel-devel-matched | Jul 29, 2026 | Jul 27, 2026 |
| Ubuntu | — | Upgrade linux-nvidia | May 25, 2026 | Apr 30, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub