CVE-2026-31692: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: rtnetlink: add missing netlink_ns_capable() check for peer netns rtnl_newlink() lacks a CAP_NET_ADMIN capability check on the peer network namespace when creating paired devices (veth, vxcan, netkit). This allows an unprivileged user with a user namespace to create interfaces in arbitrary network namespaces, including init_net. Add a netlink_ns_capable() check for CAP_NET_ADMIN in the peer namespace before allowing device creation to proceed.

Засегнати продукти

• Linux Linux: 81adee47dfb608df3ad0b91d230fb3cef75f0060 преди 0975b64ffb34560042090a5986c3a02e6c80f36f; 81adee47dfb608df3ad0b91d230fb3cef75f0060 преди d04cc16d3624218a5458b2b664ae431f1b3b334d; 81adee47dfb608df3ad0b91d230fb3cef75f0060 преди 7b735ef81286007794a227ce2539419479c02a5f
• Linux Linux: 2.6.33; преди 2.6.33; 6.18.24 до 6.18.*; 6.19.14 до 6.19.*; от 7.0 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99268
• CVE-2026-99266
• CVE-2026-99267

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-31692
• https://nvd.nist.gov/vuln/detail/CVE-2026-31692
• https://git.kernel.org/stable/c/0975b64ffb34560042090a5986c3a02e6c80f36f
• https://git.kernel.org/stable/c/d04cc16d3624218a5458b2b664ae431f1b3b334d
• https://git.kernel.org/stable/c/7b735ef81286007794a227ce2539419479c02a5f