Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Linux kernel 6.6 lets unprivileged users create network devices
published 6 months ago
Summary
The Linux kernel version 6.6.157.1-1 can let a user without administrative rights create virtual network interfaces in any network space, even the main one. This could be used to interfere with network configuration or monitoring. Updating the kernel to the latest patched version fixes the issue.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Azure Linux:3 | – | kernel |
<= 6.6.157.1-1 <= 6.6.152.1-1 |
| Azure Linux:3 | azure | kernel | <= 6.6.150.1-1 |
Original advisory text
CVE-2026-31692 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved:
rtnetlink: add missing netlink_ns_capable() check for peer netns
rtnl_newlink() lacks a CAP_NET_ADMIN capability check on the peer
network namespace when creating paired devices (veth, vxcan,
netkit). This allows an unprivileged user with a user namespace
to create interfaces in arbitrary network namespaces, including
init_net.
Add a netlink_ns_capable() check for CAP_NET_ADMIN in the peer
namespace before allowing device creation to proceed.
rtnetlink: add missing netlink_ns_capable() check for peer netns
rtnl_newlink() lacks a CAP_NET_ADMIN capability check on the peer
network namespace when creating paired devices (veth, vxcan,
netkit). This allows an unprivileged user with a user namespace
to create interfaces in arbitrary network namespaces, including
init_net.
Add a netlink_ns_capable() check for CAP_NET_ADMIN in the peer
namespace before allowing device creation to proceed.
References
Timeline
Published30 Apr 2026
Updated24 Sep 2026
First seen23 Sep 2026
Sources
AZL-85115 · OSV
Track software like this
Free during beta