CVE-2026-68142

A flaw was found in the geneve component of the Linux kernel. A local attacker, with CAP_NET_ADMIN privileges in a specific network namespace, could bypass intended permission checks. This allows them to modify the configuration of a geneve network device in a different network namespace, potentially leading to unauthorized network configuration changes or denial of service.

Red Hat has rated this vulnerability as Moderate because exploitation requires local access with elevated network capabilities (CAP_NET_ADMIN) within a child network namespace. In containerized environments, an attacker possessing administrative network privileges in an isolated container or user namespace can reconfigure Geneve virtual tunnel interfaces spanning across namespaces into the underlay environment. While this can disrupt overlay communications or induce a localized denial of service for tunnel traffic, it does not allow full host compromise or arbitrary code execution outside the network subsystem.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.