CVE-2026-52978

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The dev-set and key-rotate netlink operations allow the modification of shared device state, specifically the PSP version configuration and cryptographic key material. These operations lack proper access control because they do not require CAP NET ADMIN permissions, relying instead on the psp dev check access() function, which only verifies network namespace membership.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.