CVE-2026-31692 Details
Description
In the Linux kernel, the following vulnerability has been resolved: rtnetlink: add missing netlink_ns_capable() check for peer netns rtnl_newlink() lacks a CAP_NET_ADMIN capability check on the peer network namespace when creating paired devices (veth, vxcan, netkit). This allows an unprivileged user with a user namespace to create interfaces in arbitrary network namespaces, including init_net. Add a netlink_ns_capable() check for CAP_NET_ADMIN in the peer namespace before allowing device creation to proceed.
A vulnerability in the Linux kernel's rtnetlink component allows unprivileged users to create network interfaces in arbitrary namespaces, including the initial network namespace. This issue arises because the rtnl_newlink() function does not properly check for the CAP_NET_ADMIN capability in the peer network namespace when creating paired devices, such as veth, vxcan, and netkit. The vulnerability can be exploited by users with a user namespace, who can manipulate network interfaces across different namespaces.
Users should upgrade to the patched version of the Linux kernel where this vulnerability has been addressed. The specific commit containing the fix can be found in the Linux kernel stable tree.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/0975b64ffb34560042090a5986c3a02e6c80f36f | kernel.org | Patch |
| https://git.kernel.org/stable/c/7b735ef81286007794a227ce2539419479c02a5f | kernel.org | Patch |
| https://git.kernel.org/stable/c/d04cc16d3624218a5458b2b664ae431f1b3b334d | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 2.6.33, < 6.18.24 >= 6.19, < 6.19.14 7.0 rc1 7.0 rc2 7.0 rc3 7.0 rc4 7.0 rc5 7.0 rc6 7.0 rc7 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| May 6, 2026 | Initial Analysis | [email protected] |
| Apr 30, 2026 | New CVE Received | kernel.org |