{"id":7220,"date":"2026-09-04T18:49:28","date_gmt":"2026-09-04T10:49:28","guid":{"rendered":"https:\/\/www.54iter.cn\/?vuln=cve-2026-74283"},"modified":"2026-09-04T18:49:28","modified_gmt":"2026-09-04T10:49:28","slug":"cve-2026-74283","status":"publish","type":"vuln","link":"https:\/\/www.54iter.cn\/?vuln=cve-2026-74283","title":{"rendered":"CVE-2026-74283 [HIGH] &#8211; In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: require net adm"},"content":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>tipc: require net admin for TIPCv2 netlink mutators<\/p>\n<p>TIPCv2 registers mutating generic-netlink operations without admin<br \/>\npermission flags. Generic netlink only checks CAP_NET_ADMIN when an<br \/>\noperation sets GENL_ADMIN_PERM or GENL_UNS_ADMIN_PERM, so a local<br \/>\nunprivileged process can currently change TIPC state through commands<br \/>\nsuch as TIPC_NL_NET_SET, TIPC_NL_KEY_SET, TIPC_NL_KEY_FLUSH, and<br \/>\nbearer enable\/disable.<\/p>\n<p>The legacy TIPC netlink API already checks netlink_net_capable(&#8230;,<br \/>\nCAP_NET_ADMIN) for administrative commands. Give the TIPCv2 mutators<br \/>\nthe equivalent generic-netlink gate. Use GENL_UNS_ADMIN_PERM, which<br \/>\nmaps to the same namespace-aware CAP_NET_ADMIN check that<br \/>\nnetlink_net_capable() performs, so the behaviour matches the legacy<br \/>\npath and keeps working for CAP_NET_ADMIN holders in a non-initial user<br \/>\nnamespace (containers).<\/p>\n<p>A QEMU\/KASAN repro run as uid\/gid 65534 with zero effective<br \/>\ncapabilities previously succeeded in changing the network id and node<br \/>\nidentity, setting and flushing key material, and enabling\/disabling a<br \/>\nUDP bearer. With this patch applied the same operations fail with<br \/>\n-EPERM.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>tipc: require net admin for TIPCv2 netlink mutators<\/p>\n<p>TIPCv2 registers mutating generic-netlink operations without admin<br \/>\npermission <\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-7220","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/7220","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=7220"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=7220"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=7220"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}