CVE-2026-45254
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
In cap_net service, omitting a key from a new limit treated it as 'allow any' instead of rejecting it, potentially allowing an application to extend network permissions.
Risk Assessment
This can lead to network privilege escalation, enabling unauthorized network operations and potential data leakage.
Recommendation
Update the operating system to a patched version and review cap_net limit configurations.
Original NVD description (English source)
In the case of the cap_net service, when a key present in the old limit was omitted from the new limit, the missing key was treated as "allow any" instead of being rejected. In certain scenarios, an application that had previously restricted a subset of network operations could ask for a new limit that extended the permissions of the process.