{"id":"CVE-2026-52978","summary":"net: psp: require admin permission for dev-set and key-rotate","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: psp: require admin permission for dev-set and key-rotate\n\nThe dev-set and key-rotate netlink operations modify shared device\nstate (PSP version configuration and cryptographic key material,\nrespectively) but do not require CAP_NET_ADMIN. The only access\ncontrol is psp_dev_check_access() which merely verifies netns\nmembership.","modified":"2026-07-12T03:55:20.803756124Z","published":"2026-06-24T16:28:54.809Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/52xxx/CVE-2026-52978.json","cna_assigner":"Linux"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/aa1a08a4632af5d1117779e7ff0e32e3c69f29bd"},{"type":"WEB","url":"https://git.kernel.org/stable/c/b718342a7fbaa2dff5fefc31988c07af8c6cbc21"},{"type":"WEB","url":"https://git.kernel.org/stable/c/fb88a8c86109edb15971481e3de816a8bfdfe571"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/52xxx/CVE-2026-52978.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52978"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"00c94ca2b99e6610e483f92e531b319eeaed94aa"},{"fixed":"aa1a08a4632af5d1117779e7ff0e32e3c69f29bd"},{"fixed":"fb88a8c86109edb15971481e3de816a8bfdfe571"},{"fixed":"b718342a7fbaa2dff5fefc31988c07af8c6cbc21"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-52978.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.18.0"},{"fixed":"6.18.33"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.0.10"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-52978.json"}}],"schema_version":"1.7.5"}