A missing privilege check in the Linux kernel s390 qeth driver allows local unprivileged users to execute restricted network ioctl commands.

The issue resides in the s390 qeth network driver, which failed to enforce the CAP_NET_ADMIN capability for certain private ioctl calls. An authenticated local user can invoke these commands to perform unauthorized network configuration actions.

The CVSS score of 7.8 reflects the high risk of this vulnerability. By bypassing privilege checks, an attacker could potentially manipulate network settings, intercept traffic, or cause a denial of service, which is particularly critical for enterprise s390 mainframe environments.

Immediate Action: Update the Linux kernel to version 6.6.151, 6.12.103, 6.18.44, 7.1.8, or later, to implement the necessary capability checks.

Proactive Monitoring: Monitor network configuration changes and system logs for unauthorized use of network ioctl commands.

Compensating Controls: Utilize kernel hardening features and restricted user environments to limit the ability of non-privileged users to interact with network hardware drivers.

Public Exploit Available: No

This vulnerability represents a clear failure of access control. Organizations operating on s390 architecture should prioritize applying the provided kernel patches to prevent unauthorized network administration by local users.