CVE-2026-74467: s390/qeth: Check CAP_NET_ADMIN for private ioctls

From: Greg Kroah-Hartman <[email protected]>

Description
===========

In the Linux kernel, the following vulnerability has been resolved:

s390/qeth: Check CAP_NET_ADMIN for private ioctls

Gate the SIOCDEVPRIVATE ioctl commands SIOC_QETH_ADP_SET_SNMP_CONTROL,
SIOC_QETH_GET_CARD_TYPE and SIOC_QETH_QUERY_OAT with CAP_NET_ADMIN
capable check to ensure unprivileged users cannot invoke them.

The Linux kernel CVE team has assigned CVE-2026-74467 to this issue.


Affected and fixed versions
===========================

	Issue introduced in 5.15 with commit 18787eeebd7129ecf4960876d24f349682207783 and fixed in 6.6.151 with commit 4e48168825818bf4a13c743582227d15f1d30d04
	Issue introduced in 5.15 with commit 18787eeebd7129ecf4960876d24f349682207783 and fixed in 6.12.103 with commit b40c74262f7e1e601221cebccdbdb2b392ff9976
	Issue introduced in 5.15 with commit 18787eeebd7129ecf4960876d24f349682207783 and fixed in 6.18.44 with commit bd63c7879eaa87f1958f7ee027813356fcd9ff11
	Issue introduced in 5.15 with commit 18787eeebd7129ecf4960876d24f349682207783 and fixed in 7.1.8 with commit 93a0a846ec59a88e0c402878a15357a5ce430eb4
	Issue introduced in 5.15 with commit 18787eeebd7129ecf4960876d24f349682207783 and fixed in 7.2-rc6 with commit d211028bac1bd0fff0026bfa2a8328e5b78cd0e6

Please see https://www.kernel.org for a full list of currently supported
kernel versions by the kernel community.

Unaffected versions might change over time as fixes are backported to
older supported kernel versions.  The official CVE entry at
	https://cve.org/CVERecord/?id=CVE-2026-74467
will be updated if fixes are backported, please check that for the most
up to date information about this issue.


Affected files
==============

The file(s) affected by this issue are:
	drivers/s390/net/qeth_core_main.c


Mitigation
==========

The Linux kernel CVE team recommends that you update to the latest
stable kernel version for this, and many other bugfixes.  Individual
changes are never tested alone, but rather are part of a larger kernel
release.  Cherry-picking individual commits is not recommended or
supported by the Linux kernel community at all.  If however, updating to
the latest release is impossible, the individual changes to resolve this
issue can be found at these commits:
	https://git.kernel.org/stable/c/4e48168825818bf4a13c743582227d15f1d30d04
	https://git.kernel.org/stable/c/b40c74262f7e1e601221cebccdbdb2b392ff9976
	https://git.kernel.org/stable/c/bd63c7879eaa87f1958f7ee027813356fcd9ff11
	https://git.kernel.org/stable/c/93a0a846ec59a88e0c402878a15357a5ce430eb4
	https://git.kernel.org/stable/c/d211028bac1bd0fff0026bfa2a8328e5b78cd0e6