CVE-2026-64111
- Source
- https://cve.org/CVERecord?id=CVE-2026-64111
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64111.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-64111
- Downstream
- Published
- 2026-07-19T15:40:13.007Z
- Modified
- 2026-07-22T05:30:02.675527148Z
- Severity
-
- 7.1 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVSS Calculator
- Summary
- lsm: hold cred_guard_mutex for lsm_set_self_attr()
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
lsm: hold credguardmutex for lsmsetself_attr()
Just as procpidattr_write() already does before calling the LSM hook. This only matters for SELinux and AppArmor which check whether the process is being ptraced and if so, whether to allow the transition.
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64111.json", "cna_assigner": "Linux" }- References
-
- https://git.kernel.org/stable/c/4a9b16541ad3faf8bccb398532bf3f8b6bbf1188
- https://git.kernel.org/stable/c/5b906f31e977286888a9e31282589b545b249139
- https://git.kernel.org/stable/c/82d3acee88593e3d9e71cad4b7d6b3cf70de9d07
- https://git.kernel.org/stable/c/a010cadaf5727b8417f62fe9021fcef14a5f9b51
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64111.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-64111
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduceda04a1198088a1378d0389c250cc684f649bcc91eFixed82d3acee88593e3d9e71cad4b7d6b3cf70de9d07Fixed5b906f31e977286888a9e31282589b545b249139Fixeda010cadaf5727b8417f62fe9021fcef14a5f9b51Fixed4a9b16541ad3faf8bccb398532bf3f8b6bbf1188