Linux Kernel Vulnerability in Unshare Functionality by Linux Foundation

CVE-2026-43472

What is CVE-2026-43472?

A vulnerability exists in the Linux kernel's handling of the unshare function, particularly with the flags for creating new namespaces. When the CLONE_NEWNS flag is used without current->fs being shared, unintended memory handling issues arise. This allows current->fs to be passed incorrectly to the copy_mnt_ns function, potentially resulting in detached mount points after failure conditions, which can disrupt kernel operations. Although this bug has persisted since the introduction of unshare, it has been addressed to ensure new filesystem structures are allocated correctly and to prevent further complications.

References