CVE-2026-43390

linux: In the Linux kernel, the following vulnerability has been resolved: nstree: tighten permission checks for listing E...

CVE-2026-43390 is fixed in linux on 1 platform by DEBIAN-CVE-2026-43390 (version 6.19.10-1), released May 15, 2026. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
5.5
medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0011
1st percentile

In the Linux kernel, the following vulnerability has been resolved: nstree: tighten permission checks for listing Even privileged services should not necessarily be able to see other privileged service's namespaces so they can't leak information to each other. Use may_see_all_namespaces() helper that centralizes this policy until the nstree adapts.

Where it's fixed

ProductFixed inFixReleased
Linux
linux · Debian 14 6.19.10-1 DEBIAN-CVE-2026-43390 May 15, 2026