Riskcovery

CVE-2026-64111

lsm: hold cred_guard_mutex for lsm_set_self_attr()

State
Published
Severity
7.1 High
Published
Jul 19, 2026
Updated
Aug 5, 2026
Reserved
Jul 19, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

lsm: hold cred_guard_mutex for lsm_set_self_attr()

Just as proc_pid_attr_write() already does before calling the LSM hook. This only matters for SELinux and AppArmor which check whether the process is being ptraced and if so, whether to allow the transition.

Scores

CVSSScoreVectorSource
3.17.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:NLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • a04a1198088a1378d0389c250cc684f649bcc91e to before 82d3acee88593e3d9e71cad4b7d6b3cf70de9d07Affected
  • a04a1198088a1378d0389c250cc684f649bcc91e to before 5b906f31e977286888a9e31282589b545b249139Affected
  • a04a1198088a1378d0389c250cc684f649bcc91e to before a010cadaf5727b8417f62fe9021fcef14a5f9b51Affected
  • a04a1198088a1378d0389c250cc684f649bcc91e to before 4a9b16541ad3faf8bccb398532bf3f8b6bbf1188Affected
LinuxLinux
  • 6.8Affected
  • before 6.8Not affected
  • 6.12.92 through 6.12.*Not affected
  • 6.18.34 through 6.18.*Not affected
  • 7.0.11 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.