AZL-91370
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-91370.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-91370
- Upstream
- Published
- 2026-06-19T15:16:35Z
- Modified
- 2026-08-28T17:48:06Z
- Summary
- CVE-2026-52909 affecting package kernel for versions less than 6.6.144.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
ip6_vti: set netns_immutable on the fallback device.
john1988 and Noam Rathaus reported that vti6_init_net() does not set the netns_immutable flag on the per-netns fallback tunnel device (ip6_vti0).
Other similar tunnel drivers (like ip6_tunnel, sit, ip6_gre, and ip_tunnel) correctly set this flag during their fallback device initialization to prevent them from being moved to another network namespace.
- References