CVE-2026-52909 Details
Description
In the Linux kernel, the following vulnerability has been resolved: ip6_vti: set netns_immutable on the fallback device. john1988 and Noam Rathaus reported that vti6_init_net() does not set the netns_immutable flag on the per-netns fallback tunnel device (ip6_vti0). Other similar tunnel drivers (like ip6_tunnel, sit, ip6_gre, and ip_tunnel) correctly set this flag during their fallback device initialization to prevent them from being moved to another network namespace.
A vulnerability in the Linux kernel's VTI6 (Virtual Tunnel Interface version 6) network namespace handling has been addressed. The issue arose because the fallback tunnel device for each network namespace (ip6_vti0) did not have the 'netns_immutable' flag set, allowing it to be moved to another network namespace. This omission was reported by Noam Rathaus and john1988. Other tunnel drivers, such as ip6_tunnel, sit, ip6_gre, and ip_tunnel, correctly set this flag to prevent such movement.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for downloading the patched version are available on the Linux Kernel Archive.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/12acc977838c943636fb01e2f3087d2e4cc3b7cc | kernel.org | Patch |
| https://git.kernel.org/stable/c/12c65e2c7fef507551bd7b52123598a761662c01 | kernel.org | Patch |
| https://git.kernel.org/stable/c/7f28e3948c59481f8db9c9638e204258d26b4e41 | kernel.org | Patch |
| https://git.kernel.org/stable/c/c5dbd669db5a426b3025512322e1bf2cdbe14305 | kernel.org | Patch |
| https://git.kernel.org/stable/c/d289d5307762d1838aaece22c6b6fcad9e8865f9 | kernel.org | Patch |
| https://git.kernel.org/stable/c/dcdce3bc9f08026ff3739ee7339e1bef526fc5f3 | kernel.org | Patch |
| https://git.kernel.org/stable/c/ecf8904067dcba0dad86ece80874841e60317885 | kernel.org | Patch |
| https://git.kernel.org/stable/c/f4b6b4af7ef0661ac153c6f7eb1030aa8482c1a3 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 3.15, < 5.10.260 >= 5.11, < 5.15.211 >= 5.16, < 6.1.177 >= 6.2, < 6.6.144 >= 6.7, < 6.12.95 >= 6.13, < 6.18.36 >= 6.19, < 7.0.13 7.1 rc1 7.1 rc2 7.1 rc3 7.1 rc4 7.1 rc5 7.1 rc6 7.1 rc7 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 8, 2026 | Initial Analysis | [email protected] |
| Jul 4, 2026 | CVE Modified | kernel.org |
| Jun 28, 2026 | CVE Modified | kernel.org |
| Jun 19, 2026 | New CVE Received | kernel.org |