CVE-2026-52978

MediumCVSS 5.5/10Last modified Jul 14, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net: psp: require admin permission for dev-set and key-rotate

The dev-set and key-rotate netlink operations modify shared device state (PSP version configuration and cryptographic key material, respectively) but do not require CAP_NET_ADMIN. The only access control is psp_dev_check_access() which merely verifies netns membership.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= 00c94ca2b99e6610e483f92e531b319eeaed94aa, < aa1a08a4632af5d1117779e7ff0e32e3c69f29bd; >= 00c94ca2b99e6610e483f92e531b319eeaed94aa, < fb88a8c86109edb15971481e3de816a8bfdfe571; >= 00c94ca2b99e6610e483f92e531b319eeaed94aa, < b718342a7fbaa2dff5fefc31988c07af8c6cbc21
LinuxLinux6.18

References

Timeline

Published
Jun 24, 2026
Last modified
Jul 14, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-529795.5In the Linux kernel, the following vulnerability has been resolved: net: psp: check for device unregister when creating assoc psp_assoc_deCVE-2026-529805.5In the Linux kernel, the following vulnerability has been resolved: sched/fair: Clear rel_deadline when initializing forked entities A yieCVE-2026-529817.5In the Linux kernel, the following vulnerability has been resolved: neigh: let neigh_xmit take skb ownership neigh_xmit always releases thCVE-2026-529829.8In the Linux kernel, the following vulnerability has been resolved: net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit() syzbot rCVE-2026-529837.5In the Linux kernel, the following vulnerability has been resolved: net: airoha: fix BQL imbalance in TX path Fix a possible BQL imbalanceCVE-2026-529845.5In the Linux kernel, the following vulnerability has been resolved: net/sched: netem: fix queue limit check to include reordered packets TCVE-2026-529855.5In the Linux kernel, the following vulnerability has been resolved: netdevsim: zero initialize struct iphdr in dummy sk_buff Syzbot reportCVE-2026-529869.8In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: don't use simple_strtoul Replace unsafe pCVE-2026-529877.8In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: avoid double drm_exec_fini() in userq validate When new_adCVE-2026-529887.1In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: join hook list via splice_list_rcu() in commit phCVE-2026-529899.8In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers CVE-2026-52995.5ICMPv6 PvD protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service
CVE-2026-52978: Medium severity, CVSS 5.5 | Vulnix