AZL-88751
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-88751.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-88751
- Upstream
- Published
- 2026-05-27T14:17:09Z
- Modified
- 2026-09-09T05:29:25Z
- Summary
- CVE-2026-45932 affecting package kernel 6.6.150.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix tcx/netkit detach permissions when prog fd isn't given
This commit fixes a security issue where BPF_PROG_DETACH on tcx or netkit devices could be executed by any user when no program fd was provided, bypassing permission checks. The fix adds a capability check for CAP_NET_ADMIN or CAP_SYS_ADMIN in this case.
- References