Linux Kernel Privilege Escalation Vulnerability in Namespace Handling

A vulnerability in the Linux kernel's namespace file system (nsfs) has been addressed by tightening permission checks for opening handles. Previously, even privileged services could access the namespaces of other privileged services, potentially leading to information leaks. The vulnerability has been fixed by implementing a centralized policy that restricts visibility between namespaces, ensuring that services cannot inadvertently share sensitive information. This issue affects Linux kernel versions 6.18 and later.

Impact

Exploitation of this vulnerability could allow for unauthorized access to namespace information, potentially leading to privilege escalation by enabling a service to access or interfere with the namespaces of other services.