Vulnerability in Linux

CVE-2026-43403

In the Linux kernel, the following vulnerability has been resolved: nsfs: tighten permission checks for ns iteration ioctls Even privileged services should not necessarily be able to see other privileged service's namespaces so they can't leak information to each other. Use may_see_all_namespaces() helper that centralizes this policy until the nstree adapts.

Published · last modified .

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H.

EPSS exploit prediction

EPSS: 0.002 (6.2th percentile), scored .

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 6th percentile — 6.2% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS trend (30 days)EPSS over the last 30 days for CVE-2026-43403: held from 0.001 to 0.002.

EPSS over last 30 days · oldest: 0.001 · newest: 0.002 · change: +0.000

Affected products

  • Linux — versions a1d220d9dafa8d76ba60a784a1016c3134e6a1e8, 6.12, 0
  • Linux Kernel — versions 7.0

References

Frequently asked questions

What is CVE-2026-43403?
CVE-2026-43403 is a high-severity vulnerability in Linux. CVSS score: 8.8/10. Published 2026-05-08.
How severe is CVE-2026-43403?
High severity. CVSS v3 base score is 8.8 out of 10.