CVE-2026-31692
Description
AI Translation Available
In the Linux kernel, the following vulnerability has been resolved:
rtnetlink: add missing netlink_ns_capable() check for peer netns
rtnl_newlink() lacks a CAP_NET_ADMIN capability check on the peer
network namespace when creating paired devices (veth, vxcan,
netkit). This allows an unprivileged user with a user namespace
to create interfaces in arbitrary network namespaces, including
init_net.
Add a netlink_ns_capable() check for CAP_NET_ADMIN in the peer
namespace before allowing device creation to proceed.
EPSS (Exploit Prediction Scoring System)
Trend Analysis
EPSS (Exploit Prediction Scoring System)
Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.
EPSS Score
0,0002
Percentile
0,1th
Updated
EPSS Score Trend (Last 2 Days)
https://git.kernel.org/stable/c/0975b64ffb34560042090a5986c3a02e6c80f36f
https://git.kernel.org/stable/c/7b735ef81286007794a227ce2539419479c02a5f
https://git.kernel.org/stable/c/d04cc16d3624218a5458b2b664ae431f1b3b334d