Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-74283— tipc: require net admin for TIPCv2 netlink mutators

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会开源的一个操作系统内核。 Linux kernel存在安全漏洞，该漏洞源于TIPCv2注册变更型generic-netlink操作时未设置管理员权限标志，可能导致本地无特权进程利用TIPC_NL_NET_SET等命令更改TIPC状态。

CVSS 7.8 · High EPSS 0.16% · P6

Possible ATT&CK Techniques 1 AI

T1068 · Exploitation for Privilege Escalation

Affected Version Matrix 18

VendorProduct Version RangeStatus
Linux Linux 0655f6a8635b1b66f2434d5556b1044c14b1ccaf< b06fb5f78a9af0929aaa47c92d0b7bca0617fb25 affected
0655f6a8635b1b66f2434d5556b1044c14b1ccaf< 52864c6c13dcc292481eabfeb3c31a86c3ec06f2 affected
0655f6a8635b1b66f2434d5556b1044c14b1ccaf< e87dcc1a644d087de0bb6c94c6dd28c29b89597f affected
0655f6a8635b1b66f2434d5556b1044c14b1ccaf< 9b937de4b3ded62a24da6e8d9d623cdb2748fa74 affected
0655f6a8635b1b66f2434d5556b1044c14b1ccaf< c9668a4adb2264625daeeabc7466b783badd4614 affected
0655f6a8635b1b66f2434d5556b1044c14b1ccaf< cebaefe1aceb650d5c99a4c0e1a4dde09e211818 affected
0655f6a8635b1b66f2434d5556b1044c14b1ccaf< 56f0a2e0a1d004e025cd031c3a801ab73959269f affected
0655f6a8635b1b66f2434d5556b1044c14b1ccaf< 86b0c540e2ea397cde021eecd24145f7c16a3d4e affected
… +10 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-74283

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
tipc: require net admin for TIPCv2 netlink mutators
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: tipc: require net admin for TIPCv2 netlink mutators TIPCv2 registers mutating generic-netlink operations without admin permission flags. Generic netlink only checks CAP_NET_ADMIN when an operation sets GENL_ADMIN_PERM or GENL_UNS_ADMIN_PERM, so a local unprivileged process can currently change TIPC state through commands such as TIPC_NL_NET_SET, TIPC_NL_KEY_SET, TIPC_NL_KEY_FLUSH, and bearer enable/disable. The legacy TIPC netlink API already checks netlink_net_capable(..., CAP_NET_ADMIN) for administrative commands. Give the TIPCv2 mutators the equivalent generic-netlink gate. Use GENL_UNS_ADMIN_PERM, which maps to the same namespace-aware CAP_NET_ADMIN check that netlink_net_capable() performs, so the behaviour matches the legacy path and keeps working for CAP_NET_ADMIN holders in a non-initial user namespace (containers). A QEMU/KASAN repro run as uid/gid 65534 with zero effective capabilities previously succeeded in changing the network id and node identity, setting and flushing key material, and enabling/disabling a UDP bearer. With this patch applied the same operations fail with -EPERM.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会开源的一个操作系统内核。 Linux kernel存在安全漏洞，该漏洞源于TIPCv2注册变更型generic-netlink操作时未设置管理员权限标志，可能导致本地无特权进程利用TIPC_NL_NET_SET等命令更改TIPC状态。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux 0655f6a8635b1b66f2434d5556b1044c14b1ccaf ~ b06fb5f78a9af0929aaa47c92d0b7bca0617fb25 -
Linux Linux 3.19 -

II. Public POCs for CVE-2026-74283

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-74283

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-74283 (8)

Same Patch Batch · Linux · 2026-08-15 · 845 CVEs total

CVE-2026-74280 10.0 CRITICAL crypto: marvell/octeontx - fix DMA cleanup using wrong loop index
CVE-2026-74309 10.0 CRITICAL vdpa/octeon_ep: fix IRQ-to-ring mapping in interrupt handler
CVE-2026-72407 10.0 CRITICAL geneve: validate inner network offset in geneve_gro_complete()
CVE-2026-74475 10.0 CRITICAL vxlan: use neigh_ha_snapshot() in route_shortcircuit()
CVE-2026-72408 10.0 CRITICAL geneve: gate GRO hint in geneve_gro_complete() on gs->gro_hint
CVE-2026-72421 10.0 CRITICAL ipv4: fib: Don't ignore error route in local/main tables.
CVE-2026-74279 10.0 CRITICAL crypto: cavium/cpt - fix DMA cleanup using wrong loop index
CVE-2026-72493 9.9 CRITICAL net: serialize netif_running() check in enqueue_to_backlog()
CVE-2026-74350 9.8 CRITICAL ocfs2: validate fast symlink target during inode read
CVE-2026-72249 9.8 CRITICAL netfilter: flowtable: use dst in this direction when pushing IPIP header
CVE-2026-72248 9.8 CRITICAL netfilter: flowtable: support IPIP tunnel with direct xmit
CVE-2026-72494 9.8 CRITICAL RDMA/irdma: Replace waitqueue and flag with completion
CVE-2026-74345 9.8 CRITICAL RDMA/siw: Fix endpoint/socket association handling
CVE-2026-72083 9.8 CRITICAL scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE
CVE-2026-72098 9.8 CRITICAL dm-verity: fix buffer overflow in FEC calculation
CVE-2026-72226 9.8 CRITICAL batman-adv: tt: prevent TVLV OOB check overflow
CVE-2026-74255 9.8 CRITICAL tipc: fix UAF in tipc_l2_send_msg()
CVE-2026-74428 9.8 CRITICAL rxrpc: Fix double unlock in rxrpc_recvmsg()
CVE-2026-72084 9.8 CRITICAL scsi: target: Bound PR-OUT TransportID parsing to the received buffer
CVE-2026-72234 9.8 CRITICAL batman-adv: access unicast_ttvn skb->data only after skb realloc

Showing top 20 of 845 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2026-74283

No comments yet

Leave a comment