CVE-2026-74283

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description In TIPCv2, mutating generic-netlink operations are registered without the necessary administrative permission flags. Because generic netlink only verifies CAP NET ADMIN when an operation specifies GENL ADMIN PERM or GENL UNS ADMIN PERM, a local unprivileged process can modify the TIPC state. This is possible through commands such as TIPC NL NET SET, TIPC NL KEY SET, TIPC NL KEY FLUSH, and the enabling or disabling of bearers. This allows an attacker to change the network ID, node identity, and key material, or manipulate UDP bearers.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.