Riskcovery

CVE-2026-43391

nsfs: tighten permission checks for handle opening

State
Published
Severity
8.8 High
Published
May 8, 2026
Updated
Sep 7, 2026
Reserved
May 1, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

nsfs: tighten permission checks for handle opening

Even privileged services should not necessarily be able to see other privileged service's namespaces so they can't leak information to each other. Use may_see_all_namespaces() helper that centralizes this policy until the nstree adapts.

Scores

CVSSScoreVectorSource
3.18.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 5222470b2fbb3740f931f189db33dd1367b1ae75 to before 24ebaf6676ae4f74f4856eb645959b15e62bc1b4Affected
  • 5222470b2fbb3740f931f189db33dd1367b1ae75 to before 1797ee11451f1b2be69863a9f5bd43b948813fdfAffected
  • 5222470b2fbb3740f931f189db33dd1367b1ae75 to before d2324a9317f00013facb0ba00b00440e19d2af5eAffected
LinuxLinux
  • 6.18Affected
  • before 6.18Not affected
  • 6.18.50 through 6.18.*Not affected
  • 6.19.9 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.