nsfs: tighten permission checks for handle opening
Published May 8, 2026
8.8
HIGHCVSS 3.1
EPSS 0.17%
Description
Even privileged services should not necessarily be able to see other privileged service's namespaces so they can't leak information to each other. Use may_see_all_namespaces() helper that centralizes this policy until the nstree adapts.
Affected products
-
Affected
- ≥ , <
- ≥ , <
- ≥ , <
-
Affected
- 6.18
Unaffected
- ≥ 0, < 6.18
- ≥ 6.18.50, ≤ 6.18.*
- ≥ 6.19.9, ≤ 6.19.*
- 7.0
Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).
- ≥ 6.18 · < 6.19.9
- 7.0
- 7.0
No data.
Red Hat Enterprise Linux 10
kernel
Not affected
Red Hat Enterprise Linux 6
kernel
Not affected
Red Hat Enterprise Linux 7
kernel
Not affected
Red Hat Enterprise Linux 7
kernel-rt
Not affected
Red Hat Enterprise Linux 8
kernel
Not affected
Red Hat Enterprise Linux 8
kernel-rt
Not affected
Red Hat Enterprise Linux 9
kernel
Not affected
Red Hat Enterprise Linux 9
kernel-rt
Not affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 10 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 6 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 7 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 7 | kernel-rt | Not affected | n/a |
| Red Hat Enterprise Linux 8 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 8 | kernel-rt | Not affected | n/a |
| Red Hat Enterprise Linux 9 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 9 | kernel-rt | Not affected | n/a |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (9)
- https://access.redhat.com/security/cve/CVE-2026-43391 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2468185 Issue Tracking
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-28697 Advisory
- https://git.kernel.org/stable/c/1797ee11451f1b2be69863a9f5bd43b948813fdf Patch
- https://git.kernel.org/stable/c/24ebaf6676ae4f74f4856eb645959b15e62bc1b4
- https://git.kernel.org/stable/c/d2324a9317f00013facb0ba00b00440e19d2af5e Patch
- https://lore.kernel.org/linux-cve-announce/2026050836-CVE-2026-43391-4889@gregkh/T
- https://nvd.nist.gov/vuln/detail/CVE-2026-43391
- https://www.cve.org/CVERecord?id=CVE-2026-43391
Change history (0)
No recorded changes yet.
CVE.org / MITRE
CISA Vulnrichment
No data
GitHub
No data