A vulnerability in the Linux kernel's tun driver allowed attaching to ownerless tun devices without requiring CAP_NET_ADMIN capability. This issue has been fixed by enforcing CAP_NET_ADMIN for attaching to devices that have no assigned owner or group, closing a loophole that previously allowed unauthorized access. The fix preserves existing ownership checks and corrects the capability check placement.