Vulnerability in Linux Kernel Network Namespace Management by Vendor

CVE-2026-99201

What is CVE-2026-99201?

This vulnerability relates to an issue within the Linux kernel concerning how the netlink rhashtable key is constructed with user-controlled port IDs and a raw network namespace pointer. By manipulating these port IDs, an attacker with unprivileged access can exploit the exposure of bucket orders in the table, allowing them to infer memory addresses and the layout of the kernel's internal structures. The proposed fix involves changing the comparison key used in lookups to the unique net_cookie, enhancing the overall security and stability of the network namespace management. This adjustment ensures that both lookup operations and the integrity of namespace separation are maintained while safeguarding the kernel's architecture from potential exploitation.

References