CVE-2026-99281

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.18.61 Linux kernel versions prior to 7.3.2

Description An access control bypass exists in the TUN/TAP driver. A local user can attach to persistent TUN devices that have no assigned owner or group without possessing administrative privileges. This occurs because the system failed to require the CAP NET ADMIN capability when attaching to ownerless devices, allowing unauthorized users to gain access to them.

Recommendations Update Linux kernel to version 6.18.61. Update Linux kernel to version 7.3.2.