{"apiVersion":"1.0","identifier":"CVE-2026-74283","description":"In the Linux kernel, the following vulnerability has been resolved: tipc: require net admin for TIPCv2 netlink mutators TIPCv2 registers mutating generic-netlink operations without admin permission flags. Generic netlink only checks CAP_NET_ADMIN when an operation sets GENL_ADMIN_PERM or GENL_UNS_ADMIN_PERM, so a local unprivileged process can currently change TIPC state through commands such as TIPC_NL_NET_SET, TIPC_NL_KEY_SET, TIPC_NL_KEY_FLUSH, and bearer enable/disable. The legacy TIPC netlink API already checks netlink_net_capable(..., CAP_NET_ADMIN) for administrative commands. Give the TIPCv2 mutators the equivalent generic-netlink gate. Use GENL_UNS_ADMIN_PERM, which maps to the same namespace-aware CAP_NET_ADMIN check that netlink_net_capable() performs, so the behaviour matches the legacy path and keeps working for CAP_NET_ADMIN holders in a non-initial user namespace (containers). A QEMU/KASAN repro run as uid/gid 65534 with zero effective capabilities previously succeeded in changing the network id and node identity, setting and flushing key material, and enabling/disabling a UDP bearer. With this patch applied the same operations fail with -EPERM.","publishedAt":"2026-08-15T06:22:27","lastModifiedAt":"2026-08-17T06:19:22","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-74283","cvssScore":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","epssProbability":0.00164,"riskScore":0.79,"affectedProduct":"Linux kernel","affectedVersions":"unknown","vulnerabilityType":"Kernel","operatingSystems":[],"links":{"self":"https://www.redsauce.net/api/cves/CVE-2026-74283","webPages":{"es":"https://www.redsauce.net/es/cves/CVE-2026-74283","en":"https://www.redsauce.net/en/cves/CVE-2026-74283","fr":"https://www.redsauce.net/fr/cves/CVE-2026-74283","pt":"https://www.redsauce.net/pt/cves/CVE-2026-74283","de":"https://www.redsauce.net/de/cves/CVE-2026-74283","sk":"https://www.redsauce.net/sk/cves/CVE-2026-74283","el":"https://www.redsauce.net/el/cves/CVE-2026-74283"},"source":"https://nvd.nist.gov/vuln/detail/CVE-2026-74283"}}