nsfs: tighten permission checks for ns iteration ioctls (Linux Linux)
En bref
- Source
- NVD
- EPSS
- EPSS 0.13 % · centile 3 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Linux
- Statut NVD
- Analyzed
Rechercher sur…
Description
In the Linux kernel, the following vulnerability has been resolved: nsfs: tighten permission checks for ns iteration ioctls Even privileged services should not necessarily be able to see other privileged service's namespaces so they can't leak information to each other. Use may_see_all_namespaces() helper that centralizes this policy until the nstree adapts.
Références
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | HIGH 8.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H | Linux |
| CVSS 3.1 | HIGH 8.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H | NVD · 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Secondary) |
Références européennes
- ENISA EUVD · EUVD-2026-28709
- GCVE · GCVE-0-2026-43403
Avis du CERT-FR
- CERTFR-2026-AVI-0956 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0927 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Configurations affectées (CPE NVD)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.12 < 6.12.78cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.13 < 6.18.20cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.19 < 6.19.9cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
Produits affectés
| Produit | Versions |
|---|---|
| Linux · Linux | affected a1d220d9dafa8d76ba60a784a1016c3134e6a1e8 < 3376b345df155ca36d8611857b41ff7d5183fc38 ; affected a1d220d9dafa8d76ba60a784a1016c3134e6a1e8 < 2f3dea284c761c890d676f77d5e55c0c496b4ef4 ; affected a1d220d9dafa8d76ba60a784a1016c3134e6a1e8 < 0ad650e60150eda789deca5e78a6a09d26bf8fc9 ; affected a1d220d9dafa8d76ba60a784a1016c3134e6a1e8 < e6b899f08066e744f89df16ceb782e06868bd148 |
| Linux · Linux | affected 6.12 ; unaffected 0 < 6.12 ; unaffected 6.12.78 ≤ 6.12.* ; unaffected 6.18.20 ≤ 6.18.* ; unaffected 6.19.9 ≤ 6.19.* ; unaffected 7.0 ≤ * |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |