CVE-2026-72061

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ipip6 changelink() function where the system fails to properly verify the CAP NET ADMIN capability within the device network namespace (netns). Because the rtnl changelink path only checks permissions against dev net(dev), a user with privileges in that namespace but lacking them in the tunnel link network namespace t->net can rewrite a tunnel residing in t->net.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.