PT-2026-51872 · Linux · Linux

Published 2026-06-24 · Updated 2026-06-24 · CVE-2026-52978

Mitre

In the Linux kernel, the following vulnerability has been resolved:

net: psp: require admin permission for dev-set and key-rotate

The dev-set and key-rotate netlink operations modify shared device state (PSP version configuration and cryptographic key material, respectively) but do not require CAP NET ADMIN. The only access control is psp dev check access() which merely verifies netns membership.

Related Identifiers

CVE-2026-52978

Affected Products

Linux

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-52978 · Security Note
• https://git.kernel.org/stable/c/aa1a08a4632af5d1117779e7ff0e32e3c69f29bd · Note
• https://git.kernel.org/stable/c/b718342a7fbaa2dff5fefc31988c07af8c6cbc21 · Note
• https://git.kernel.org/stable/c/fb88a8c86109edb15971481e3de816a8bfdfe571 · Note