CVE-2026-72136

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the xfrm interface where the xfrmi changelink() function does not properly validate permissions across different network namespaces (netns). The system checks for CAP NET ADMIN privileges only against the device network namespace dev net(dev), ignoring the interface link network namespace xi->net. This allows a user with privileges in the device namespace, but lacking them in the interface link namespace, to rewrite an interface residing in xi->net.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.