CVE-2026-43390 Details
Description
In the Linux kernel, the following vulnerability has been resolved: nstree: tighten permission checks for listing Even privileged services should not necessarily be able to see other privileged service's namespaces so they can't leak information to each other. Use may_see_all_namespaces() helper that centralizes this policy until the nstree adapts.
A vulnerability in the Linux kernel's namespace management can lead to unauthorized information leakage between privileged services. The issue arises because these services can inadvertently access each other's namespaces. The vulnerability is present in the Linux kernel stable tree, specifically in versions 6.19 and later. The root cause is inadequate permission checks, allowing privileged services to list and potentially leak information from other privileged services' namespaces. This vulnerability has been addressed by tightening the permission checks and centralizing the visibility policy.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/0abd81645fc95ec6a9d4e4813000f22c5efc0ff4 | kernel.org | Patch |
| https://git.kernel.org/stable/c/8d76afe84fa2babf604b3c173730d4d2b067e361 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.19, < 6.19.9 7.0 rc1 7.0 rc2 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| May 26, 2026 | Initial Analysis | [email protected] |
| May 8, 2026 | New CVE Received | kernel.org |