CVE-2026-74467

s390/qeth: Check CAP_NET_ADMIN for private ioctls

State
Published
Severity
7.8 High
Published
Aug 15, 2026
Updated
Oct 16, 2026
Reserved
Aug 15, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

s390/qeth: Check CAP_NET_ADMIN for private ioctls

Gate the SIOCDEVPRIVATE ioctl commands SIOC_QETH_ADP_SET_SNMP_CONTROL, SIOC_QETH_GET_CARD_TYPE and SIOC_QETH_QUERY_OAT with CAP_NET_ADMIN capable check to ensure unprivileged users cannot invoke them.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 18787eeebd7129ecf4960876d24f349682207783 to before 8fb69547924bbb3d7c900a0d7d137a7234db3f5fAffected
  • 18787eeebd7129ecf4960876d24f349682207783 to before 3ea5210db058347481c93849786982f874f7be2dAffected
  • 18787eeebd7129ecf4960876d24f349682207783 to before 4e48168825818bf4a13c743582227d15f1d30d04Affected
  • 18787eeebd7129ecf4960876d24f349682207783 to before b40c74262f7e1e601221cebccdbdb2b392ff9976Affected
  • 18787eeebd7129ecf4960876d24f349682207783 to before bd63c7879eaa87f1958f7ee027813356fcd9ff11Affected
  • 18787eeebd7129ecf4960876d24f349682207783 to before 93a0a846ec59a88e0c402878a15357a5ce430eb4Affected
  • 18787eeebd7129ecf4960876d24f349682207783 to before d211028bac1bd0fff0026bfa2a8328e5b78cd0e6Affected
LinuxLinux
  • 5.15Affected
  • before 5.15Not affected
  • 5.15.216 through 5.15.*Not affected
  • 6.1.183 through 6.1.*Not affected
  • 6.6.151 through 6.6.*Not affected
  • 6.12.103 through 6.12.*Not affected
  • 6.18.44 through 6.18.*Not affected
  • 7.1.8 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.