Medium severity5.5NVD Advisory· Published Apr 30, 2026· Updated Jun 17, 2026
CVE-2026-31692
CVE-2026-31692
Description
In the Linux kernel, the following vulnerability has been resolved:
rtnetlink: add missing netlink_ns_capable() check for peer netns
rtnl_newlink() lacks a CAP_NET_ADMIN capability check on the peer network namespace when creating paired devices (veth, vxcan, netkit). This allows an unprivileged user with a user namespace to create interfaces in arbitrary network namespaces, including init_net.
Add a netlink_ns_capable() check for CAP_NET_ADMIN in the peer namespace before allowing device creation to proceed.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
94- osv-coords85 versionspkg:linux/kernelpkg:apk/chainguard/linux-aws-6.12pkg:apk/chainguard/linux-azure-6.18pkg:apk/chainguard/linux-qemu-6.18pkg:apk/chainguard/linux-vmware-6.18pkg:apk/chainguard/linux-vmware-6.12pkg:apk/chainguard/linux-aws-6.18pkg:apk/chainguard/linux-azure-6.12pkg:apk/chainguard/linux-gcp-6.18pkg:rpm/almalinux/kernel-64k-modules-extrapkg:rpm/almalinux/kernel-abi-stablelistspkg:rpm/almalinux/kernel-corepkg:rpm/almalinux/kernel-cross-headerspkg:rpm/almalinux/kernel-debugpkg:rpm/almalinux/kernel-debug-corepkg:rpm/almalinux/kernel-debug-develpkg:rpm/almalinux/kernel-debug-devel-matchedpkg:rpm/almalinux/kernel-debug-modulespkg:rpm/almalinux/kernel-debug-modules-corepkg:rpm/almalinux/kernelpkg:rpm/almalinux/kernel-64kpkg:rpm/almalinux/kernel-64k-corepkg:rpm/almalinux/kernel-64k-debugpkg:rpm/almalinux/kernel-64k-debug-corepkg:rpm/almalinux/kernel-64k-debug-develpkg:rpm/almalinux/kernel-64k-debug-devel-matchedpkg:rpm/almalinux/kernel-64k-debug-modulespkg:rpm/almalinux/kernel-64k-debug-modules-corepkg:rpm/almalinux/kernel-64k-debug-modules-extrapkg:rpm/almalinux/kernel-64k-develpkg:rpm/almalinux/kernel-64k-devel-matchedpkg:rpm/almalinux/kernel-64k-modulespkg:rpm/almalinux/kernel-64k-modules-corepkg:rpm/almalinux/kernel-debug-modules-extrapkg:rpm/almalinux/kernel-debug-uki-virtpkg:rpm/almalinux/kernel-develpkg:rpm/almalinux/kernel-devel-matchedpkg:rpm/almalinux/kernel-docpkg:rpm/almalinux/kernel-headerspkg:rpm/almalinux/kernel-modulespkg:rpm/almalinux/kernel-modules-corepkg:rpm/almalinux/kernel-modules-extrapkg:rpm/almalinux/kernel-modules-extra-matchedpkg:rpm/almalinux/kernel-rtpkg:rpm/almalinux/kernel-rt-64kpkg:rpm/almalinux/kernel-rt-64k-corepkg:rpm/almalinux/kernel-rt-64k-debugpkg:rpm/almalinux/kernel-rt-64k-debug-corepkg:rpm/almalinux/kernel-rt-64k-debug-develpkg:rpm/almalinux/kernel-rt-64k-debug-modulespkg:rpm/almalinux/kernel-rt-64k-debug-modules-corepkg:rpm/almalinux/kernel-rt-64k-debug-modules-extrapkg:rpm/almalinux/kernel-rt-64k-develpkg:rpm/almalinux/kernel-rt-64k-modulespkg:rpm/almalinux/kernel-rt-64k-modules-corepkg:rpm/almalinux/kernel-rt-64k-modules-extrapkg:rpm/almalinux/kernel-rt-corepkg:rpm/almalinux/kernel-rt-debugpkg:rpm/almalinux/kernel-rt-debug-corepkg:rpm/almalinux/kernel-rt-debug-develpkg:rpm/almalinux/kernel-rt-debug-modulespkg:rpm/almalinux/kernel-rt-debug-modules-corepkg:rpm/almalinux/kernel-rt-debug-modules-extrapkg:rpm/almalinux/kernel-rt-develpkg:rpm/almalinux/kernel-rt-modulespkg:rpm/almalinux/kernel-rt-modules-corepkg:rpm/almalinux/kernel-rt-modules-extrapkg:rpm/almalinux/kernel-toolspkg:rpm/almalinux/kernel-tools-libspkg:rpm/almalinux/kernel-tools-libs-develpkg:rpm/almalinux/kernel-uki-virtpkg:rpm/almalinux/kernel-uki-virt-addonspkg:rpm/almalinux/kernel-zfcpdumppkg:rpm/almalinux/kernel-zfcpdump-corepkg:rpm/almalinux/kernel-zfcpdump-develpkg:rpm/almalinux/kernel-zfcpdump-devel-matchedpkg:rpm/almalinux/kernel-zfcpdump-modulespkg:rpm/almalinux/kernel-zfcpdump-modules-corepkg:rpm/almalinux/kernel-zfcpdump-modules-extrapkg:rpm/almalinux/libperfpkg:rpm/almalinux/perfpkg:rpm/almalinux/python3-perfpkg:rpm/almalinux/rtlapkg:rpm/almalinux/rvpkg:rpm/almalinux/bpftool
>= 2.6.33, < 6.18.24+ 84 more
- (no CPE)range: >= 2.6.33, < 6.18.24
- (no CPE)range: < 6.12.85-r2
- (no CPE)range: < 6.18.31-r0
- (no CPE)range: < 6.18.24-r3
- (no CPE)range: < 6.18.31-r0
- (no CPE)range: < 6.12.85-r2
- (no CPE)range: < 6.18.31-r0
- (no CPE)range: < 6.12.85-r2
- (no CPE)range: < 6.18.31-r0
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 6.12.0-211.39.1.el10_2
- (no CPE)range: < 4.18.0-553.150.1.el8_10
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 8 more
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=2.6.33,<6.18.24
- cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:*
- (no CPE)
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.