CVE-2026-52909

ip6_vti: set netns_immutable on the fallback device.

State: Published
Severity: 7.8 High
Published: Jun 19, 2026
Updated: Oct 19, 2026
Reserved: Jun 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ip6_vti: set netns_immutable on the fallback device.

john1988 and Noam Rathaus reported that vti6_init_net() does not set the netns_immutable flag on the per-netns fallback tunnel device (ip6_vti0).

Other similar tunnel drivers (like ip6_tunnel, sit, ip6_gre, and ip_tunnel) correctly set this flag during their fallback device initialization to prevent them from being moved to another network namespace.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

CWE-863 Incorrect Authorization

Affected Products

Product	Versions
LinuxLinux	61220ab349485d911083d0b7990ccd3db6c63297 to before 12acc977838c943636fb01e2f3087d2e4cc3b7ccAffected 61220ab349485d911083d0b7990ccd3db6c63297 to before 7f28e3948c59481f8db9c9638e204258d26b4e41Affected 61220ab349485d911083d0b7990ccd3db6c63297 to before 12c65e2c7fef507551bd7b52123598a761662c01Affected 61220ab349485d911083d0b7990ccd3db6c63297 to before f4b6b4af7ef0661ac153c6f7eb1030aa8482c1a3Affected 61220ab349485d911083d0b7990ccd3db6c63297 to before c5dbd669db5a426b3025512322e1bf2cdbe14305Affected 61220ab349485d911083d0b7990ccd3db6c63297 to before ecf8904067dcba0dad86ece80874841e60317885Affected 61220ab349485d911083d0b7990ccd3db6c63297 to before dcdce3bc9f08026ff3739ee7339e1bef526fc5f3Affected 61220ab349485d911083d0b7990ccd3db6c63297 to before d289d5307762d1838aaece22c6b6fcad9e8865f9Affected
LinuxLinux	3.15Affected before 3.15Not affected 5.10.260 through 5.10.Not affected 5.15.211 through 5.15.Not affected 6.1.177 through 6.1.Not affected 6.6.144 through 6.6.Not affected 6.12.95 through 6.12.Not affected 6.18.36 through 6.18.Not affected 7.0.13 through 7.0.*Not affected 7.1 and laterNot affected

Product

Versions

LinuxLinux

61220ab349485d911083d0b7990ccd3db6c63297 to before 12acc977838c943636fb01e2f3087d2e4cc3b7ccAffected
61220ab349485d911083d0b7990ccd3db6c63297 to before 7f28e3948c59481f8db9c9638e204258d26b4e41Affected
61220ab349485d911083d0b7990ccd3db6c63297 to before 12c65e2c7fef507551bd7b52123598a761662c01Affected
61220ab349485d911083d0b7990ccd3db6c63297 to before f4b6b4af7ef0661ac153c6f7eb1030aa8482c1a3Affected
61220ab349485d911083d0b7990ccd3db6c63297 to before c5dbd669db5a426b3025512322e1bf2cdbe14305Affected
61220ab349485d911083d0b7990ccd3db6c63297 to before ecf8904067dcba0dad86ece80874841e60317885Affected
61220ab349485d911083d0b7990ccd3db6c63297 to before dcdce3bc9f08026ff3739ee7339e1bef526fc5f3Affected
61220ab349485d911083d0b7990ccd3db6c63297 to before d289d5307762d1838aaece22c6b6fcad9e8865f9Affected

LinuxLinux

3.15Affected
before 3.15Not affected
5.10.260 through 5.10.*Not affected
5.15.211 through 5.15.*Not affected
6.1.177 through 6.1.*Not affected
6.6.144 through 6.6.*Not affected
6.12.95 through 6.12.*Not affected
6.18.36 through 6.18.*Not affected
7.0.13 through 7.0.*Not affected
7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.