In the Linux kernel, the following vulnerability has been resolved: net: psp: require admin permission for dev-set and key-rotate The dev-set and key-rotate netlink operations modify shared device state (PSP version configuration and cryptographic key material, respectively) but do not require CAP_NET_ADMIN. The only access control is psp_dev_check_access() which merely verifies netns membership.

A flaw was found in the Linux kernel's Platform Security Processor (PSP) networking component. A local user without administrative privileges could exploit this vulnerability by utilizing the `dev-set` and `key-rotate` netlink operations. These operations, which modify sensitive PSP version configuration and cryptographic key material, did not properly enforce administrator permissions. This could lead to unauthorized modification of critical system security settings and cryptographic keys.

Red Hat Enterprise Linux 10 Not affected kernel Red Hat Enterprise Linux 6 Not affected kernel Red Hat Enterprise Linux 7 Not affected kernel Red Hat Enterprise Linux 7 Not affected kernel-rt Red Hat Enterprise Linux 8 Not affected kernel Red Hat Enterprise Linux 8 Not affected kernel-rt Red Hat Enterprise Linux 9 Not affected kernel Red Hat Enterprise Linux 9 Not affected kernel-rt https://www.cve.org/CVERecord?id=CVE-2026-52978 https://nvd.nist.gov/vuln/detail/CVE-2026-52978 https://lore.kernel.org/linux-cve-announce/2026062441-CVE-2026-52978-fa50@gregkh/T