Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-52978

net: psp: require admin permission for dev-set and key-rotate

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: net: psp: require admin permission for dev-set and key-rotate The dev-set and key-rotate netlink operations modify shared device state (PSP version configuration and cryptographic key material, respectively) but do not require CAP_NET_ADMIN. The only access control is psp_dev_check_access() which merely verifies netns membership.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 00c94ca2b99e6610e483f92e531b319eeaed94aa to < aa1a08a4632af5d1117779e7ff0e32e3c69f29bdaffected
  • 00c94ca2b99e6610e483f92e531b319eeaed94aa to < fb88a8c86109edb15971481e3de816a8bfdfe571affected
  • 00c94ca2b99e6610e483f92e531b319eeaed94aa to < b718342a7fbaa2dff5fefc31988c07af8c6cbc21affected

Linux Linux

Default version status: affected

  • 6.18affected
  • 0 to < 6.18unaffected
  • 6.18.33 to ≤ 6.18.*unaffected
  • 7.0.10 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References