CVE-2026-64111

In the Linux kernel, the following vulnerability has been resolved: lsm: hold cred_guard_mutex for lsm_set_self_attr() Just as proc_pid_attr_write() already does before calling the LSM hook. This only matters for SELinux and AppArmor which check whether the process is being ptraced and if so, whether to allow the transition.

CVSS v3 7.1 HIGH

7.1^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://git.kernel.org/stable/c/4a9b16541ad3faf8bccb398532bf3f8b6bbf1188
https://git.kernel.org/stable/c/5b906f31e977286888a9e31282589b545b249139
https://git.kernel.org/stable/c/82d3acee88593e3d9e71cad4b7d6b3cf70de9d07
https://git.kernel.org/stable/c/a010cadaf5727b8417f62fe9021fcef14a5f9b51

Configurations

No configuration.

History

20 Jul 2026, 15:17

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 7.1

19 Jul 2026, 16:17

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-07-19 16:17

Updated : 2026-07-20 15:17

NVD link : CVE-2026-64111

Mitre link : CVE-2026-64111

CVE.ORG link : CVE-2026-64111

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2026-64111", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.1, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 1.8}]}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "a04a1198088a1378d0389c250cc684f649bcc91e", "lessThan": "82d3acee88593e3d9e71cad4b7d6b3cf70de9d07", "versionType": "git"}, {"status": "affected", "version": "a04a1198088a1378d0389c250cc684f649bcc91e", "lessThan": "5b906f31e977286888a9e31282589b545b249139", "versionType": "git"}, {"status": "affected", "version": "a04a1198088a1378d0389c250cc684f649bcc91e", "lessThan": "a010cadaf5727b8417f62fe9021fcef14a5f9b51", "versionType": "git"}, {"status": "affected", "version": "a04a1198088a1378d0389c250cc684f649bcc91e", "lessThan": "4a9b16541ad3faf8bccb398532bf3f8b6bbf1188", "versionType": "git"}], "programFiles": ["security/lsm_syscalls.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.8"}, {"status": "unaffected", "version": "0", "lessThan": "6.8", "versionType": "semver"}, {"status": "unaffected", "version": "6.12.92", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.34", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "7.0.11", "versionType": "semver", "lessThanOrEqual": "7.0.*"}, {"status": "unaffected", "version": "7.1", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["security/lsm_syscalls.c"], "defaultStatus": "affected"}]}], "published": "2026-07-19T16:17:52.463", "references": [{"url": "https://git.kernel.org/stable/c/4a9b16541ad3faf8bccb398532bf3f8b6bbf1188", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/5b906f31e977286888a9e31282589b545b249139", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/82d3acee88593e3d9e71cad4b7d6b3cf70de9d07", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/a010cadaf5727b8417f62fe9021fcef14a5f9b51", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Received", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nlsm: hold cred_guard_mutex for lsm_set_self_attr()\n\nJust as proc_pid_attr_write() already does before calling the LSM\nhook. This only matters for SELinux and AppArmor which check\nwhether the process is being ptraced and if so, whether to\nallow the transition."}], "lastModified": "2026-07-20T15:17:09.810", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}