Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-31692— rtnetlink: add missing netlink_ns_capable() check for peer netns

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于rtnl_newlink()缺少对peer网络命名空间的CAP_NET_ADMIN能力检查，可能导致无特权的用户空间用户在任意网络命名空间中创建接口。

AI Predicted 7.8 Difficulty: Easy EPSS 0.12% · P2

Possible ATT&CK Techniques 1 AI

T1068 · Exploitation for Privilege Escalation

Affected Version Matrix 8

VendorProduct Version RangeStatus
Linux Linux 81adee47dfb608df3ad0b91d230fb3cef75f0060< 0975b64ffb34560042090a5986c3a02e6c80f36f affected
81adee47dfb608df3ad0b91d230fb3cef75f0060< d04cc16d3624218a5458b2b664ae431f1b3b334d affected
81adee47dfb608df3ad0b91d230fb3cef75f0060< 7b735ef81286007794a227ce2539419479c02a5f affected
2.6.33 affected
< 2.6.33 unaffected
6.18.24≤ 6.18.* unaffected
6.19.14≤ 6.19.* unaffected
7.0≤ * unaffected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-31692

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
rtnetlink: add missing netlink_ns_capable() check for peer netns
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: rtnetlink: add missing netlink_ns_capable() check for peer netns rtnl_newlink() lacks a CAP_NET_ADMIN capability check on the peer network namespace when creating paired devices (veth, vxcan, netkit). This allows an unprivileged user with a user namespace to create interfaces in arbitrary network namespaces, including init_net. Add a netlink_ns_capable() check for CAP_NET_ADMIN in the peer namespace before allowing device creation to proceed.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于rtnl_newlink()缺少对peer网络命名空间的CAP_NET_ADMIN能力检查，可能导致无特权的用户空间用户在任意网络命名空间中创建接口。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux 81adee47dfb608df3ad0b91d230fb3cef75f0060 ~ 0975b64ffb34560042090a5986c3a02e6c80f36f -
Linux Linux 2.6.33 -

II. Public POCs for CVE-2026-31692

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-31692

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-31692 (3)

Same Patch Batch · Linux · 2026-04-30 · 4 CVEs total

CVE-2026-31693 7.8 HIGH cifs: some missing initializations on replay
CVE-2026-31786 7.8 HIGH Buffer overflow in drivers/xen/sys-hypervisor.c
CVE-2026-31787 xen/privcmd: fix double free via VMA splitting

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2026-31692

No comments yet

Leave a comment