PT-2026-51872 · Linux · Linux

Publicado 2026-06-24 · Atualizado 2026-06-24 · CVE-2026-52978

Mitre

In the Linux kernel, the following vulnerability has been resolved:

net: psp: require admin permission for dev-set and key-rotate

The dev-set and key-rotate netlink operations modify shared device state (PSP version configuration and cryptographic key material, respectively) but do not require CAP NET ADMIN. The only access control is psp dev check access() which merely verifies netns membership.

Identificadores relacionados

CVE-2026-52978

Produtos afetados

Linux

Referências · 4

• https://git.kernel.org/stable/c/aa1a08a4632af5d1117779e7ff0e32e3c69f29bd · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-52978 · Nota de Segurança
• https://git.kernel.org/stable/c/b718342a7fbaa2dff5fefc31988c07af8c6cbc21 · Nota
• https://git.kernel.org/stable/c/fb88a8c86109edb15971481e3de816a8bfdfe571 · Nota