{"id":66606,"date":"2026-06-28T03:34:21","date_gmt":"2026-06-28T03:34:21","guid":{"rendered":"https:\/\/zero.redgem.net\/?p=66606"},"modified":"2026-06-28T03:34:21","modified_gmt":"2026-06-28T03:34:21","slug":"ppp-require-capnetadmin-in-target-netns-for-unattached-ioctls","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=66606","title":{"rendered":"ppp: require CAP_NET_ADMIN in target netns for unattached ioctls_CVE-2026-53075"},"content":{"rendered":"

{“lastseen”:””,”description”:”In the Linux kernel, the following vulnerability has been resolved:\\n\\nppp: require CAP_NET_ADMIN in target netns for unattached ioctls\\n\\n\/dev\/ppp open is currently authorized against file-\\u003ef_cred-\\u003euser_ns,\\nwhile unattached administrative ioctls operate on current-\\u003ensproxy-\\u003enet_ns.\\n\\nAs a result, a local unprivileged user can create a new user namespace\\nwith CLONE_NEWUSER, gain CAP_NET_ADMIN only in that new user namespace,\\nand still issue PPPIOCNEWUNIT, PPPIOCATTACH, or PPPIOCATTCHAN against\\nan inherited network namespace.\\n\\nRequire CAP_NET_ADMIN in the user namespace that owns the target network\\nnamespace before handling unattached PPP administrative ioctls.\\n\\nThis preserves normal pppd operation in the network namespace it is\\nactually privileged in, while rejecting the userns-only inherited-netns\\ncase.”,”published”:”2026-06-24T16:30:16.214Z”,”modified”:”2026-06-28T06:38:59.844Z”,”type”:”cve”,”title”:”ppp: require CAP_NET_ADMIN in target netns for unattached ioctls”,”source”:”Linux”,”references”:”https:\/\/git.kernel.org\/stable\/c\/c9edd90c57ae23692fff6b049fdfa4572a9fd532\\nhttps:\/\/git.kernel.org\/stable\/c\/5080e188c914110034bbc569d5cfa2f06204681d\\nhttps:\/\/git.kernel.org\/stable\/c\/67e901e28d177ac9a9bed76d69ce3471e704a89e\\nhttps:\/\/git.kernel.org\/stable\/c\/954745d0223e7caec917c0b2d1a889ff56fa6e54\\nhttps:\/\/git.kernel.org\/stable\/c\/3b2c2157dc2afc5c17cd7238afefca92f1ef330e\\nhttps:\/\/git.kernel.org\/stable\/c\/5013be175c7ffd8b39efbc3c9c4db5b10b85fea8\\nhttps:\/\/git.kernel.org\/stable\/c\/1a8a51ce85075a56a743b6f142606dd2696a391c\\nhttps:\/\/git.kernel.org\/stable\/c\/2bb6379416fd19f44c3423a00bfd8626259f6067″,”id”:”CVE-2026-53075″,”bulletinFamily”:””,”cwe”:null,”cvelist”:null,”sourceData”:”Linux Linux 273ec51dd7ceaa76e038875d85061ec856d8905e\\nLinux Linux 273ec51dd7ceaa76e038875d85061ec856d8905e\\nLinux Linux 273ec51dd7ceaa76e038875d85061ec856d8905e\\nLinux Linux 273ec51dd7ceaa76e038875d85061ec856d8905e\\nLinux Linux 273ec51dd7ceaa76e038875d85061ec856d8905e\\nLinux Linux 273ec51dd7ceaa76e038875d85061ec856d8905e\\nLinux Linux 273ec51dd7ceaa76e038875d85061ec856d8905e\\nLinux Linux 273ec51dd7ceaa76e038875d85061ec856d8905e\\nLinux Linux 2.6.30″,”sourceHref”:””,”cvss”:{“score”:8.8,”severity”:”HIGH”,”vector”:”CVSS:3.1\/AV:L\/AC:L\/PR:L\/UI:N\/S:C\/C:H\/I:H\/A:H”,”version”:”3.1″},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:””,”category_name”:”CVE”,”post_link”:””,”product”:”Linux”,”version”:”273ec51dd7ceaa76e038875d85061ec856d8905e”,”vendor”:”Linux”,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"

{“lastseen”:””,”description”:”In the Linux kernel, the following vulnerability has been resolved:\\n\\nppp: require CAP_NET_ADMIN in target netns for unattached ioctls\\n\\n\/dev\/ppp open is currently authorized against file-\\u003ef_cred-\\u003euser_ns,\\nwhile unattached…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[6,8,41,12,15,13,7,11,5],"class_list":["post-66606","post","type-post","status-publish","format-standard","hentry","category-category_cve","tag-cve","tag-cvss","tag-cvss-88","tag-exploit","tag-high","tag-news","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\nppp: require CAP_NET_ADMIN in target netns for unattached ioctls_CVE-2026-53075 - zero redgem<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/zero.redgem.net\/?p=66606\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"ppp: require CAP_NET_ADMIN in target netns for unattached ioctls_CVE-2026-53075 - zero redgem\" \/>\n<meta property=\"og:description\" content=\"{“lastseen”:””,”description”:”In the Linux kernel, the following vulnerability has been resolved:nnppp: require CAP_NET_ADMIN in target netns for unattached ioctlsnn\/dev\/ppp open is currently authorized against file-u003ef_cred-u003euser_ns,nwhile unattached...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/zero.redgem.net\/?p=66606\" \/>\n<meta property=\"og:site_name\" content=\"zero redgem\" \/>\n<meta property=\"article:published_time\" content=\"2026-06-28T03:34:21+00:00\" \/>\n<meta name=\"author\" content=\"invoker\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"invoker\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=66606#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=66606\"},\"author\":{\"name\":\"invoker\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/person\\\/fbfeae8dfad117ac08a7621bee1a1dca\"},\"headline\":\"ppp: require CAP_NET_ADMIN in target netns for unattached ioctls_CVE-2026-53075\",\"datePublished\":\"2026-06-28T03:34:21+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=66606\"},\"wordCount\":469,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#organization\"},\"keywords\":[\"CVE\",\"CVSS\",\"CVSS-8.8\",\"exploit\",\"HIGH\",\"news\",\"Security\",\"tapic\",\"Vulnerability\"],\"articleSection\":[\"category_cve\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/zero.redgem.net\\\/?p=66606#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=66606\",\"url\":\"https:\\\/\\\/zero.redgem.net\\\/?p=66606\",\"name\":\"ppp: require CAP_NET_ADMIN in target netns for unattached ioctls_CVE-2026-53075 - zero redgem\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#website\"},\"datePublished\":\"2026-06-28T03:34:21+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=66606#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/zero.redgem.net\\\/?p=66606\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/?p=66606#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/zero.redgem.net\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"ppp: require CAP_NET_ADMIN in target netns for unattached ioctls_CVE-2026-53075\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#website\",\"url\":\"https:\\\/\\\/zero.redgem.net\\\/\",\"name\":\"zero redgem\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/zero.redgem.net\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#organization\",\"name\":\"zero redgem\",\"url\":\"https:\\\/\\\/zero.redgem.net\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"\",\"contentUrl\":\"\",\"width\":191,\"height\":188,\"caption\":\"zero redgem\"},\"image\":{\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/zero.redgem.net\\\/#\\\/schema\\\/person\\\/fbfeae8dfad117ac08a7621bee1a1dca\",\"name\":\"invoker\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g\",\"caption\":\"invoker\"},\"sameAs\":[\"https:\\\/\\\/zero.redgem.net\"],\"url\":\"https:\\\/\\\/zero.redgem.net\\\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"ppp: require CAP_NET_ADMIN in target netns for unattached ioctls_CVE-2026-53075 - zero redgem","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/zero.redgem.net\/?p=66606","og_locale":"en_US","og_type":"article","og_title":"ppp: require CAP_NET_ADMIN in target netns for unattached ioctls_CVE-2026-53075 - zero redgem","og_description":"{“lastseen”:””,”description”:”In the Linux kernel, the following vulnerability has been resolved:nnppp: require CAP_NET_ADMIN in target netns for unattached ioctlsnn\/dev\/ppp open is currently authorized against file-u003ef_cred-u003euser_ns,nwhile unattached...","og_url":"https:\/\/zero.redgem.net\/?p=66606","og_site_name":"zero redgem","article_published_time":"2026-06-28T03:34:21+00:00","author":"invoker","twitter_card":"summary_large_image","twitter_misc":{"Written by":"invoker","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/zero.redgem.net\/?p=66606#article","isPartOf":{"@id":"https:\/\/zero.redgem.net\/?p=66606"},"author":{"name":"invoker","@id":"https:\/\/zero.redgem.net\/#\/schema\/person\/fbfeae8dfad117ac08a7621bee1a1dca"},"headline":"ppp: require CAP_NET_ADMIN in target netns for unattached ioctls_CVE-2026-53075","datePublished":"2026-06-28T03:34:21+00:00","mainEntityOfPage":{"@id":"https:\/\/zero.redgem.net\/?p=66606"},"wordCount":469,"commentCount":0,"publisher":{"@id":"https:\/\/zero.redgem.net\/#organization"},"keywords":["CVE","CVSS","CVSS-8.8","exploit","HIGH","news","Security","tapic","Vulnerability"],"articleSection":["category_cve"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/zero.redgem.net\/?p=66606#respond"]}]},{"@type":"WebPage","@id":"https:\/\/zero.redgem.net\/?p=66606","url":"https:\/\/zero.redgem.net\/?p=66606","name":"ppp: require CAP_NET_ADMIN in target netns for unattached ioctls_CVE-2026-53075 - zero redgem","isPartOf":{"@id":"https:\/\/zero.redgem.net\/#website"},"datePublished":"2026-06-28T03:34:21+00:00","breadcrumb":{"@id":"https:\/\/zero.redgem.net\/?p=66606#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/zero.redgem.net\/?p=66606"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/zero.redgem.net\/?p=66606#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/zero.redgem.net\/"},{"@type":"ListItem","position":2,"name":"ppp: require CAP_NET_ADMIN in target netns for unattached ioctls_CVE-2026-53075"}]},{"@type":"WebSite","@id":"https:\/\/zero.redgem.net\/#website","url":"https:\/\/zero.redgem.net\/","name":"zero redgem","description":"","publisher":{"@id":"https:\/\/zero.redgem.net\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/zero.redgem.net\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/zero.redgem.net\/#organization","name":"zero redgem","url":"https:\/\/zero.redgem.net\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/zero.redgem.net\/#\/schema\/logo\/image\/","url":"","contentUrl":"","width":191,"height":188,"caption":"zero redgem"},"image":{"@id":"https:\/\/zero.redgem.net\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/zero.redgem.net\/#\/schema\/person\/fbfeae8dfad117ac08a7621bee1a1dca","name":"invoker","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f17c01d7338e6932bcde121cf83569393df3374625d25afd62677cfb528f2e3e?s=96&d=mm&r=g","caption":"invoker"},"sameAs":["https:\/\/zero.redgem.net"],"url":"https:\/\/zero.redgem.net\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/posts\/66606","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=66606"}],"version-history":[{"count":0,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=\/wp\/v2\/posts\/66606\/revisions"}],"wp:attachment":[{"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=66606"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=66606"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/zero.redgem.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=66606"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}