Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: rtnetlink: add missing netlink_ns_capable() check for peer netns rtnl_newlink() lacks a CAP_NET_ADMIN capability check on the peer network namespace when creating paired devices (veth, vxcan, netkit). This allows an unprivileged user with a user namespace to create interfaces in arbitrary network namespaces, including init_net. Add a netlink_ns_capable() check for CAP_NET_ADMIN in the peer namespace before allowing device creation to proceed.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | >= 2.6.33, < 6.18.24 |
References
- https://git.kernel.org/stable/c/0975b64ffb34560042090a5986c3a02e6c80f36fPatch
- https://git.kernel.org/stable/c/7b735ef81286007794a227ce2539419479c02a5fPatch
- https://git.kernel.org/stable/c/d04cc16d3624218a5458b2b664ae431f1b3b334dPatch
FAQ
What is CVE-2026-31692?
CVE-2026-31692 is a vulnerability with a CVSS score of 5.5 (MEDIUM). In the Linux kernel, the following vulnerability has been resolved: rtnetlink: add missing netlink_ns_capable() check for peer netns rtnl_newlink() lacks a CAP_NET_ADMIN capability check on the peer...
How severe is CVE-2026-31692?
CVE-2026-31692 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-31692?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.