{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2026-74283",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2026-74283",
    "idYear": 2026,
    "status": "PUBLISHED",
    "publishedAt": "2026-08-15T05:57:52.667Z",
    "updatedAt": "2026-10-16T18:55:30.055Z",
    "importedAt": "2026-10-24T01:58:30.346Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": "tipc: require net admin for TIPCv2 netlink mutators",
      "summary": "In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: require net admin for TIPCv2 netlink mutators\n\nTIPCv2 registers mutating generic-netlink operations without admin\npermission flags. Generic netlink only checks CAP_NET_ADMIN when an\noperation sets GENL_ADMIN_PERM or GENL_UNS_ADMIN_PERM, so a local\nunprivileged process can currently change TIPC state through commands\nsuch as TIPC_NL_NET_SET, TIPC_NL_KEY_SET, TIPC_NL_KEY_FLUSH, and\nbearer enable/disable.\n\nThe legacy TIPC netlink API already checks netlink_net_capable(...,\nCAP_NET_ADMIN) for administrative commands. Give the TIPCv2 mutators\nthe equivalent generic-netlink gate. Use GENL_UNS_ADMIN_PERM, which\nmaps to the same namespace-aware CAP_NET_ADMIN check that\nnetlink_net_capable() performs, so the behaviour matches the legacy\npath and keeps working for CAP_NET_ADMIN holders in a non-initial user\nnamespace (containers).\n\nA QEMU/KASAN repro run as uid/gid 65534 with zero effective\ncapabilities previously succeeded in changing the network id and node\nidentity, setting and flushing key material, and enabling/disabling a\nUDP bearer. With this patch applied the same operations fail with\n-EPERM.",
      "affected": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0655f6a8635b1b66f2434d5556b1044c14b1ccaf",
              "status": "affected",
              "versionType": "git",
              "lessThan": "b06fb5f78a9af0929aaa47c92d0b7bca0617fb25"
            },
            {
              "version": "0655f6a8635b1b66f2434d5556b1044c14b1ccaf",
              "status": "affected",
              "versionType": "git",
              "lessThan": "52864c6c13dcc292481eabfeb3c31a86c3ec06f2"
            },
            {
              "version": "0655f6a8635b1b66f2434d5556b1044c14b1ccaf",
              "status": "affected",
              "versionType": "git",
              "lessThan": "e87dcc1a644d087de0bb6c94c6dd28c29b89597f"
            },
            {
              "version": "0655f6a8635b1b66f2434d5556b1044c14b1ccaf",
              "status": "affected",
              "versionType": "git",
              "lessThan": "9b937de4b3ded62a24da6e8d9d623cdb2748fa74"
            },
            {
              "version": "0655f6a8635b1b66f2434d5556b1044c14b1ccaf",
              "status": "affected",
              "versionType": "git",
              "lessThan": "c9668a4adb2264625daeeabc7466b783badd4614"
            },
            {
              "version": "0655f6a8635b1b66f2434d5556b1044c14b1ccaf",
              "status": "affected",
              "versionType": "git",
              "lessThan": "cebaefe1aceb650d5c99a4c0e1a4dde09e211818"
            },
            {
              "version": "0655f6a8635b1b66f2434d5556b1044c14b1ccaf",
              "status": "affected",
              "versionType": "git",
              "lessThan": "56f0a2e0a1d004e025cd031c3a801ab73959269f"
            },
            {
              "version": "0655f6a8635b1b66f2434d5556b1044c14b1ccaf",
              "status": "affected",
              "versionType": "git",
              "lessThan": "86b0c540e2ea397cde021eecd24145f7c16a3d4e"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "versions": [
            {
              "version": "3.19",
              "status": "affected"
            },
            {
              "version": "0",
              "status": "unaffected",
              "versionType": "semver",
              "lessThan": "3.19"
            },
            {
              "version": "5.10.261",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.10.*"
            },
            {
              "version": "5.15.212",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "version": "6.1.178",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "version": "6.6.145",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.6.*"
            },
            {
              "version": "6.12.97",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.12.*"
            },
            {
              "version": "6.18.40",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "6.18.*"
            },
            {
              "version": "7.1.5",
              "status": "unaffected",
              "versionType": "semver",
              "lessThanOrEqual": "7.1.*"
            },
            {
              "version": "7.2",
              "status": "unaffected",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ]
        }
      ]
    }
  }
}