In the Linux kernel, the following vulnerability has been resolved:
vxlan: require CAP_NET_ADMIN in the device netns for changelink
A tunnel changelink() operates on at most two netns, dev_net(dev) and the sticky underlay netns vxlan->net. They differ once the device is created in or moved to a netns other than the one the request runs in. The rtnl changelink path checks CAP_NET_ADMIN only against dev_net(dev), so a caller privileged there but not in vxlan->net can rewrite a vxlan device whose underlay lives in vxlan->net.
vxlan_changelink() validates and applies the new configuration against vxlan->net (vxlan_config_validate(vxlan->net, ...)) and can reopen the underlay socket in that netns, so the same reasoning as the tunnel changelink series applies here.
Gate vxlan_changelink() with rtnl_dev_link_net_capable(), at the top of the op before any attribute is parsed, matching ipgre_changelink() and the rest of the "require CAP_NET_ADMIN in the device netns for changelink" series.
Found by 0sec automated security-research tooling (https://0sec.ai).
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.18-develUpgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-headersUpgrade kernel6.18-tools-develUpgrade kernel6.18Upgrade kernel6.18-toolsUpgrade kernel6.12-debuginfoUpgrade kernel6.18-modules-extra-commonUpgrade kernel6.18-debuginfo-common-x86_64Upgrade perf6.18Upgrade kernel6.18-debuginfoUpgrade kernel6.18-headersUpgrade microvm-kernel6.18Upgrade perf6.12-debuginfoUpgrade kernel6.12-develUpgrade python3-perf6.12-debuginfoUpgrade perf6.12Upgrade kernel6.12-tools-develUpgrade python3-perf6.12Upgrade python3-perf6.18-debuginfoUpgrade python3-perf6.18Upgrade kernel6.12-toolsUpgrade bpftool6.18Upgrade kernel-livepatch-6.18.44-99.149Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-modules-extraUpgrade kernel6.18-tools-debuginfoUpgrade kernel6.18-debuginfo-common-aarch64Upgrade kernel6.12-modules-extra-commonUpgrade bpftool6.18-debuginfoUpgrade kernel6.12Upgrade kernel-livepatch-6.12.103-127.188Upgrade kernel6.18-modules-extraUpgrade bpftool6.12Upgrade bpftool6.12-debuginfoUpgrade perf6.18-debuginfo | Sep 1, 2026 | Aug 12, 2026 |
| Debian | — | Upgrade linuxUpgrade linux-6.12 | Aug 13, 2026 | Aug 13, 2026 |
| Redhat_linux | — | No solution exists | Aug 17, 2026 | Aug 12, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 17, 2026 | Aug 12, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub