Riskcovery

CVE-2026-52978

net: psp: require admin permission for dev-set and key-rotate

State
Published
Severity
Not scored
Published
Jun 24, 2026
Updated
Jun 24, 2026
Reserved
Jun 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net: psp: require admin permission for dev-set and key-rotate

The dev-set and key-rotate netlink operations modify shared device state (PSP version configuration and cryptographic key material, respectively) but do not require CAP_NET_ADMIN. The only access control is psp_dev_check_access() which merely verifies netns membership.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 00c94ca2b99e6610e483f92e531b319eeaed94aa to before aa1a08a4632af5d1117779e7ff0e32e3c69f29bdAffected
  • 00c94ca2b99e6610e483f92e531b319eeaed94aa to before fb88a8c86109edb15971481e3de816a8bfdfe571Affected
  • 00c94ca2b99e6610e483f92e531b319eeaed94aa to before b718342a7fbaa2dff5fefc31988c07af8c6cbc21Affected
LinuxLinux
  • 6.18Affected
  • before 6.18Not affected
  • 6.18.33 through 6.18.*Not affected
  • 7.0.10 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.