CVE-2026-74467s390/qeth: Check CAP_NET_ADMIN for private ioctls
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: s390/qeth: Check CAP_NET_ADMIN for private ioctls Gate the SIOCDEVPRIVATE ioctl commands SIOC_QETH_ADP_SET_SNMP_CONTROL, SIOC_QETH_GET_CARD_TYPE and SIOC_QETH_QUERY_OAT with CAP_NET_ADMIN capable check to ensure unprivileged users cannot invoke them.
- CVSS
- 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 16, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | 18787eeebd7129ecf4960876d24f349682207783 builds before 8fb69547924bbb3d7c900a0d7d137a7234db3f5f; 18787eeebd7129ecf4960876d24f349682207783 builds before 3ea5210db058347481c93849786982f874f7be2d; 18787eeebd7129ecf4960876d24f349682207783 builds before 4e48168825818bf4a13c743582227d15f1d30d04; from 18787eeebd7129ecf4960876d24f349682207783 before b40c74262f7e1e601221cebccdbdb2b392ff9976; from 18787eeebd7129ecf4960876d24f349682207783 before bd63c7879eaa87f1958f7ee027813356fcd9ff11; 18787eeebd7129ecf4960876d24f349682207783 builds before 93a0a846ec59a88e0c402878a15357a5ce430eb4; from 18787eeebd7129ecf4960876d24f349682207783 before d211028bac1bd0fff0026bfa2a8328e5b78cd0e6 | CNA record |
References
- https://git.kernel.org/stable/c/8fb69547924bbb3d7c900a0d7d137a7234db3f5f
- https://git.kernel.org/stable/c/3ea5210db058347481c93849786982f874f7be2d
- https://git.kernel.org/stable/c/4e48168825818bf4a13c743582227d15f1d30d04
- https://git.kernel.org/stable/c/b40c74262f7e1e601221cebccdbdb2b392ff9976
- https://git.kernel.org/stable/c/bd63c7879eaa87f1958f7ee027813356fcd9ff11
- https://git.kernel.org/stable/c/93a0a846ec59a88e0c402878a15357a5ce430eb4
- https://git.kernel.org/stable/c/d211028bac1bd0fff0026bfa2a8328e5b78cd0e6
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.