CVE-2026-52978

net: psp: require admin permission for dev-set and key-rotate

published June 24, 2026

CVSS
—
EPSS
0%
Percentile
4.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net: psp: require admin permission for dev-set and key-rotate

The dev-set and key-rotate netlink operations modify shared device

state (PSP version configuration and cryptographic key material,

respectively) but do not require CAP_NET_ADMIN. The only access

control is psp_dev_check_access() which merely verifies netns

membership.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00160 · 4.8th percentile
Published
2026-06-24T16:28Z
EPSS history
Timeline
  • 24 JUN 16:28Z
    net: psp: require admin permission for dev-set and key-rotate
    cvelistv5