CVE-2026-45932

Source
https://cve.org/CVERecord?id=CVE-2026-45932
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-45932.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-45932
Downstream
AZL (1)
BELL (1)
CGA (5)
DEBIAN (1)
openSUSE (1)
ROOT (2)
SUSE (11)
UBUNTU (1)
Related
Published
2026-05-27T12:17:50Z
Modified
2026-10-28T02:30:41Z
Severity
  • 7.3 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H CVSS Calculator
Summary
bpf: Fix tcx/netkit detach permissions when prog fd isn't given
Details

In the Linux kernel, the following vulnerability has been resolved:

bpf: Fix tcx/netkit detach permissions when prog fd isn't given

This commit fixes a security issue where BPF_PROG_DETACH on tcx or netkit devices could be executed by any user when no program fd was provided, bypassing permission checks. The fix adds a capability check for CAP_NET_ADMIN or CAP_SYS_ADMIN in this case.

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/45xxx/CVE-2026-45932.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
e420bed025071a623d2720a92bc2245c84757ecb
Fixed
8e1623e7d61faf16cbadc80550da874303611ff5
Fixed
0c249f523175963b0a746bba673ecebdf6cefd86
Fixed
4e0772cded109c238411f2fac36ac39302758b81
Fixed
3f04cc1e5374da4c5e791ae010a06cfea7bacbe6
Fixed
ae23bc81ddf7c17b663c4ed1b21e35527b0a7131

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-45932.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.6.0
Fixed
6.6.160
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.114
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.14
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
6.19.4

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-45932.json"