vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-64111

lsm: hold cred_guard_mutex for lsm_set_self_attr()

HIGH
7.1
CVSS Score
Published: July 19, 2026 at 03:40 PM UTC
Updated: August 12, 2026 at 04:08 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH7.1
Exploit prediction
EPSS 0.1%

Description

In the Linux kernel, the following vulnerability has been resolved: lsm: hold cred_guard_mutex for lsm_set_self_attr() Just as proc_pid_attr_write() already does before calling the LSM hook. This only matters for SELinux and AppArmor which check whether the process is being ptraced and if so, whether to allow the transition.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
95%
6.13 ≤ v < 6.18.346.19 ≤ v < 7.0.116.8 ≤ v < 6.12.926.8 ≤ v < 6.18.346.8 ≤ v < 7.0.116.8 ≤ v < 7.17.1 rc17.1 rc27.1 rc37.1 rc4a04a1198088a1378d0389c250cc684f649bcc91e
Vendor states this is fixed in 4a9b16541ad3faf8bccb398532bf3f8b6bbf1188 (fixed)
Vendor states this is fixed in 5b906f31e977286888a9e31282589b545b249139 (fixed)
Vendor states this is fixed in 82d3acee88593e3d9e71cad4b7d6b3cf70de9d07 (fixed)
Vendor states this is fixed in a010cadaf5727b8417f62fe9021fcef14a5f9b51 (fixed)
Vendor states this is fixed in 6.12.92 (unaffected)
Vendor states this is fixed in 6.18.34 (unaffected)
Vendor states this is fixed in 6.8 (unaffected)
Vendor states this is fixed in 7.0.11 (unaffected)
Vendor states this is fixed in 7.1 (unaffected)

References (4)

Patch
Source: cverecord
https://git.kernel.org/stable/c/82d3acee88593e3d9e71cad4b7d6b3cf70de9d07
Patch
Source: cverecord
https://git.kernel.org/stable/c/5b906f31e977286888a9e31282589b545b249139
Patch
Source: cverecord
https://git.kernel.org/stable/c/a010cadaf5727b8417f62fe9021fcef14a5f9b51
Patch
Source: cverecord
https://git.kernel.org/stable/c/4a9b16541ad3faf8bccb398532bf3f8b6bbf1188

CVSS

7.1HIGHLinux
Vector?

Quick Info

StatusANALYZED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card