Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-68432— vxlan: require CAP_NET_ADMIN in the device netns for changelink

AI Predicted 7.8 Difficulty: Easy EPSS 0.17% · P6
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2026-68432

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
vxlan: require CAP_NET_ADMIN in the device netns for changelink
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: vxlan: require CAP_NET_ADMIN in the device netns for changelink A tunnel changelink() operates on at most two netns, dev_net(dev) and the sticky underlay netns vxlan->net. They differ once the device is created in or moved to a netns other than the one the request runs in. The rtnl changelink path checks CAP_NET_ADMIN only against dev_net(dev), so a caller privileged there but not in vxlan->net can rewrite a vxlan device whose underlay lives in vxlan->net. vxlan_changelink() validates and applies the new configuration against vxlan->net (vxlan_config_validate(vxlan->net, ...)) and can reopen the underlay socket in that netns, so the same reasoning as the tunnel changelink series applies here. Gate vxlan_changelink() with rtnl_dev_link_net_capable(), at the top of the op before any attribute is parsed, matching ipgre_changelink() and the rest of the "require CAP_NET_ADMIN in the device netns for changelink" series. Found by 0sec automated security-research tooling (https://0sec.ai).
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5

Affected Products

VendorProductAffected VersionsCPESubscribe
LinuxLinux 8bcdc4f3a20be949df54b67e5ae2734daabb5792 ~ b3793d7dccb192ffff29894d11824db6251acdd5 -
LinuxLinux 4.11 -

II. Public POCs for CVE-2026-68432

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-68432

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-68432 (5)

Same Patch Batch · Linux · 2026-08-12 · 22 CVEs total

CVE-2026-68440net: txgbe: fix heap overflow when reading module EEPROM
CVE-2026-68429drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe()
CVE-2026-68430drm/amdgpu/gfx8: drop unecessary BUG_ON()
CVE-2026-68431ksmbd: validate minimum PDU size for transform requests
CVE-2026-68433libceph: bound get_version reply decode to front len
CVE-2026-68434serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms
CVE-2026-68435LoongArch: Fix address space mismatch in kexec command line lookup
CVE-2026-68436drm/amd/display: use kvzalloc to allocate struct dc
CVE-2026-68437drm/imagination: Fit paired fragment job in the correct CCCB
CVE-2026-68438smp: Make CSD lock acquisition atomic for debug mode
CVE-2026-68439wifi: mt76: mt7925: fix possible NULL-pointer deref in mt7925_mcu_bss_he_tlv()
CVE-2026-68450btrfs: free mapping node on duplicate reloc root insert
CVE-2026-68441net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains
CVE-2026-68442btrfs: don't propagate EXTENT_FLAG_LOGGING to split extent maps
CVE-2026-68443hwmon: (gigabyte_waterforce) Stop device IO before calling hid_hw_stop
CVE-2026-68444firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get()
CVE-2026-68445drm/vc4: Prevent shader BO mappings from becoming writable
CVE-2026-68446drm/vmwgfx: Validate vmw_surface_metadata::array_size
CVE-2026-68447drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size
CVE-2026-68448ovl: check access to copy_file_range source with src mounter creds

Showing top 20 of 22 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2026-68432

No comments yet

Leave a comment