High severity8.8NVD Advisory· Published May 8, 2026· Updated Jun 17, 2026

CVE-2026-43391

Description

In the Linux kernel, the following vulnerability has been resolved:

nsfs: tighten permission checks for handle opening

Even privileged services should not necessarily be able to see other privileged service's namespaces so they can't leak information to each other. Use may_see_all_namespaces() helper that centralizes this policy until the nstree adapts.

Affected products

Linux/Kernel4 versions
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=6.18,<6.19.9
- cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
- (no CPE)
osv-coords3 versions
pkg:apk/chainguard/linux-gcp-6.18-bootc-boot-installed pkg:apk/chainguard/linux-qemu-6.18-bootc-boot-installed pkg:linux/kernel
< 6.18.38-r2+ 2 more
- (no CPE)range: < 6.18.38-r2
- (no CPE)range: < 6.18.38-r2
- (no CPE)range: >= 6.18.0, < 6.19.9

cvss	0.572
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000

CVE-2026-43391

Description

Affected products

Patches

Vulnerability mechanics

References

News mentions