← CVE announcements

SECURITY ANNOUNCEMENT

CVE-2026-99074

23 October 2026

Replacement requires CAP_NET_ADMIN in the network namespace. Where unprivileged user namespaces are permitted, a local user can obtain it in a new user and network namespace.

Introduced

6.6.793bed2abab4a682d426624ce9add9d7b6d475d4e4

Fixed releases

6.12.113c60d17d6dd61adc761ac6f65a008fefbc54cbf87

6.18.57c6d670ac656badfd0e15355e07a13a6bdf3b69fd

6.6.1607fd60d3c9a1e1b11ef5f1643bbae78d91eae2f4a

7.2.11f27483f9975b5065ff67054cc7eb8edac6083488

7.36619e01855e65ef35723685a557e3eb106f4ecf5

View source announcement ↗