Riskcovery

CVE-2026-31692

rtnetlink: add missing netlink_ns_capable() check for peer netns

State
Published
Severity
Not scored
Published
Apr 30, 2026
Updated
May 11, 2026
Reserved
Mar 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

rtnetlink: add missing netlink_ns_capable() check for peer netns

rtnl_newlink() lacks a CAP_NET_ADMIN capability check on the peer network namespace when creating paired devices (veth, vxcan, netkit). This allows an unprivileged user with a user namespace to create interfaces in arbitrary network namespaces, including init_net.

Add a netlink_ns_capable() check for CAP_NET_ADMIN in the peer namespace before allowing device creation to proceed.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 81adee47dfb608df3ad0b91d230fb3cef75f0060 to before 0975b64ffb34560042090a5986c3a02e6c80f36fAffected
  • 81adee47dfb608df3ad0b91d230fb3cef75f0060 to before d04cc16d3624218a5458b2b664ae431f1b3b334dAffected
  • 81adee47dfb608df3ad0b91d230fb3cef75f0060 to before 7b735ef81286007794a227ce2539419479c02a5fAffected
LinuxLinux
  • 2.6.33Affected
  • before 2.6.33Not affected
  • 6.18.24 through 6.18.*Not affected
  • 6.19.14 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.