Boletines de Vulnerabilidades

CVE-2026-52978

   
Software afectado LINUX KERNEL
 
In the Linux kernel, the following vulnerability has been resolved:

net: psp: require admin permission for dev-set and key-rotate

The dev-set and key-rotate netlink operations modify shared device
state (PSP version configuration and cryptographic key material,
respectively) but do not require CAP_NET_ADMIN. The only access
control is psp_dev_check_access() which merely verifies netns
membership.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-52978