CVE-2026-72127

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the netdev-genl component where the netdev nl napi fill one() function reports the NAPI kthread PID in NETDEV A NAPI PID using task pid nr(). This function returns the PID in the initial pid namespace. Because NETDEV CMD NAPI GET lacks GENL ADMIN PERM and the netdev genl family is netnsok, a caller within a child pid namespace can execute it and view the kthread's global PID, even though the kthread is not visible in that specific pid namespace and should return a value of 0.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.