TIPCv2 registers mutating generic‑netlink operations without an administrative permission flag. As a result, a local unprivileged process can invoke commands such as TIPC_NL_NET_SET, TIPC_NL_KEY_SET, TIPC_NL_KEY_FLUSH and bearer enable/disable, thereby altering the TIPC network identifier, node identity, key material, and UDP bearer state. These modifications compromise the integrity of the TIPC networking layer and can be used to disrupt service or bypass isolation boundaries. The vulnerability is a classic missing authorization flaw.

The issue exists in all Linux kernel releases that contain the TIPCv2 netlink interface prior to the patch that adds a CAP_NET_ADMIN check. The affected systems are Linux kernels where TIPC support is enabled; the vulnerability is not limited to a specific kernel version but applies to all builds lacking the patch.

An EPSS score of < 1% indicates a very low estimated probability of exploitation, but the CVSS score of 7.8 still reflects high severity. The vulnerability can be exploited locally by an unprivileged user to modify the TIPC networking state, potentially disrupting services or bypassing isolation boundaries. The CVE is not listed in the CISA KEV catalog, so there are no known widespread exploits reported.