CVE-2026-72053

A flaw was found in the Linux kernel's ipip networking component. A local attacker with certain network administration capabilities in one network namespace could exploit an insufficient permission check in the ipip_changelink() function. This could allow them to modify the configuration of a network tunnel in a different network namespace where they lack full administrative privileges, potentially leading to unauthorized network configuration changes or denial of service.

This vulnerability is rated Moderate because exploitation requires local access with administrative privileges, such as CAP_NET_ADMIN, inside an existing network namespace. While a local authenticated actor operating within an isolated namespace can modify tunnel properties across namespace boundaries, the vulnerability does not grant kernel execution privileges or host escape. Typical deployments that do not assign network administrative rights across disjointed namespaces or that do not utilize IP-in-IP tunnels are not exposed.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.