High · published May 27, 2026
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix tcx/netkit detach permissions when prog fd isn't given
This commit fixes a security issue where BPF_PROG_DETACH on tcx or
netkit devices could be executed by any user when no program fd was
provided, bypassing permission checks. The fix adds a capability
check for CAP_NET_ADMIN or CAP_SYS_ADMIN in this case.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | ≥ 6.6, < 6.18.14 | 6.18.14 |
| linux/linux_kernel | ≥ 6.19, < 6.19.4 | 6.19.4 |