CVE-2026-43390
linux: In the Linux kernel, the following vulnerability has been resolved: nstree: tighten permission checks for listing E...
CVE-2026-43390 is fixed in linux on 1 platform by DEBIAN-CVE-2026-43390 (version 6.19.10-1), released May 15, 2026. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
5.5
medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0011
1st percentile
In the Linux kernel, the following vulnerability has been resolved: nstree: tighten permission checks for listing Even privileged services should not necessarily be able to see other privileged service's namespaces so they can't leak information to each other. Use may_see_all_namespaces() helper that centralizes this policy until the nstree adapts.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| linux · Debian 14 | 6.19.10-1 | DEBIAN-CVE-2026-43390 | May 15, 2026 |