A flaw in the Linux kernel allows privileged services to view the namespaces of other privileged services, potentially leaking sensitive configuration and state information. This improper permission check enables an unauthorized privileged process to gather data it should not have access to, thereby violating confidentiality constraints.

Linux Kernel deployments across all vendor distributions. Specific affected versions are not enumerated in the advisory, so any kernel release prior to the inclusion of the fix may be vulnerable.

The CVSS score of 5.5 indicates a moderate severity vulnerability, while the EPSS score remains below 1% and the issue is not currently listed in CISA KEV. The attack vector is inferred to be local, requiring a privileged service that is already running on the system; a malicious or misconfigured service could exploit the weakened namespace visibility to extract information from other services.