CVE-2026-68432

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the vxlan component where the changelink() operation does not properly verify permissions across different network namespaces (netns). Specifically, the rtnl changelink path only checks for CAP NET ADMIN privileges against dev net(dev), ignoring the sticky underlay network namespace vxlan->net. This allows a user with privileges in dev net(dev) but without them in vxlan->net to rewrite a vxlan device. The vxlan changelink() function validates configurations and can reopen underlay sockets within vxlan->net, making it susceptible to unauthorized configuration changes.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.