Answer in brief
CVE-2026-72055 records a Unknown severity vulnerability in net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
Answer in brief
CVE-2026-72055 records a Unknown severity vulnerability in net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=61220ab349485d911083d0b7990ccd3db6c63297 <f5254e7766b4ac02b66b2ccef896cd278503cb11 || >=61220ab349485d911083d0b7990ccd3db6c63297 <ef897249dc957089e6f7f11ceea699e093ad51bd || >=61220ab349485d911083d0b7990ccd3db6c63297 <f6e8b52a2cb3bbd72ddc2d44e474b907b9dcf5ba || >=61220ab349485d911083d0b7990ccd3db6c63297 <c64b9ae7eb97e81d54b792910a3aeafd92566c79 || >=61220ab349485d911083d0b7990ccd3db6c63297 <b2b61c540571b3cc2f461e2a579ba2cc8c2a52cf || >=61220ab349485d911083d0b7990ccd3db6c63297 <0b2f9c908f930ec4be17d389723f9a202d6a883c || >=61220ab349485d911083d0b7990ccd3db6c63297 <f97e93ebf2f9b8ef3b87f7a9371255e84d151587 || >=61220ab349485d911083d0b7990ccd3db6c63297 <e2ac3b242c37dff323a964962e43854f4b1a2b79 | f5254e7766b4ac02b66b2ccef896cd278503cb11, ef897249dc957089e6f7f11ceea699e093ad51bd, f6e8b52a2cb3bbd72ddc2d44e474b907b9dcf5ba, c64b9ae7eb97e81d54b792910a3aeafd92566c79, b2b61c540571b3cc2f461e2a579ba2cc8c2a52cf, 0b2f9c908f930ec4be17d389723f9a202d6a883c, f97e93ebf2f9b8ef3b87f7a9371255e84d151587, e2ac3b242c37dff323a964962e43854f4b1a2b79 |
| Linux/Linuxgeneric | 3.15 | Not reported |
Published upstream
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 15, 2026
In the Linux kernel, the following vulnerability has been resolved: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink vti6_changelink() operates on at most two netns, dev_net(dev) and the tunnel link netns t->net. They differ once the device is created in or moved to a netns other than the one the request runs in. The rtnl changelink path checks CAP_NET_ADMIN only against dev_net(dev), so a caller privileged there but not in t->net can rewrite a tunnel that lives in t->net. Gate vti6_changelink() on rtnl_dev_link_net_capable() at its top, before any attribute is parsed.
Quoted source text, attributed separately from HOL analysis.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=61220ab349485d911083d0b7990ccd3db6c63297 <f5254e7766b4ac02b66b2ccef896cd278503cb11 || >=61220ab349485d911083d0b7990ccd3db6c63297 <ef897249dc957089e6f7f11ceea699e093ad51bd || >=61220ab349485d911083d0b7990ccd3db6c63297 <f6e8b52a2cb3bbd72ddc2d44e474b907b9dcf5ba || >=61220ab349485d911083d0b7990ccd3db6c63297 <c64b9ae7eb97e81d54b792910a3aeafd92566c79 || >=61220ab349485d911083d0b7990ccd3db6c63297 <b2b61c540571b3cc2f461e2a579ba2cc8c2a52cf || >=61220ab349485d911083d0b7990ccd3db6c63297 <0b2f9c908f930ec4be17d389723f9a202d6a883c || >=61220ab349485d911083d0b7990ccd3db6c63297 <f97e93ebf2f9b8ef3b87f7a9371255e84d151587 || >=61220ab349485d911083d0b7990ccd3db6c63297 <e2ac3b242c37dff323a964962e43854f4b1a2b79 | f5254e7766b4ac02b66b2ccef896cd278503cb11, ef897249dc957089e6f7f11ceea699e093ad51bd, f6e8b52a2cb3bbd72ddc2d44e474b907b9dcf5ba, c64b9ae7eb97e81d54b792910a3aeafd92566c79, b2b61c540571b3cc2f461e2a579ba2cc8c2a52cf, 0b2f9c908f930ec4be17d389723f9a202d6a883c, f97e93ebf2f9b8ef3b87f7a9371255e84d151587, e2ac3b242c37dff323a964962e43854f4b1a2b79 |
| Linux/Linuxgeneric | 3.15 | Not reported |
Published upstream
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 15, 2026
In the Linux kernel, the following vulnerability has been resolved: net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink vti6_changelink() operates on at most two netns, dev_net(dev) and the tunnel link netns t->net. They differ once the device is created in or moved to a netns other than the one the request runs in. The rtnl changelink path checks CAP_NET_ADMIN only against dev_net(dev), so a caller privileged there but not in t->net can rewrite a tunnel that lives in t->net. Gate vti6_changelink() on rtnl_dev_link_net_capable() at its top, before any attribute is parsed.
Quoted source text, attributed separately from HOL analysis.