CVE-2026-46333: ptrace: slightly saner 'get_dumpable()' logic
In the Linux kernel, the following vulnerability has been resolved:
Other sources
ptrace: slightly saner 'getdumpable()' logic
— Microsoft
Read root-owned files as an unprivileged user. Pre-31e62c2ebbfd kernels (everything in stable as of 2026-05-14).
The bug ptracemayaccess() skips the dumpable check when task->mm == NULL. doexit() runs exitmm() before exitfiles() — no mm, fds still there. pidfdgetfd(2) succeeds in that window when the caller's uid matches the target's.
Reported by Qualys, fixed by Linus 2026-05-14. Jann Horn flagged the FD-theft shape in October 2020. Six years.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.257-1Fixed in 6.1.174-1Fixed in 6.12.90-2Fixed in 7.0.12-2 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.174-1~deb11u1 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Patch 31e62c2ebbfd - Configuration
Set kernel.yama.ptrace_scope=2 to restrict ptrace cross-process access (e.g., for attaching to running processes).
Linux kernel (Yama ptrace scope) kernel.yama.ptrace_scope = 2 - Operational
Persist the ptrace scope setting across reboots by writing it to /etc/sysctl.d/99-ptrace-scope.conf (containing kernel.yama.ptrace_scope=2).
Event History
Frequently Asked Questions
What is the severity of CVE-2026-46333?
The severity of CVE-2026-46333 is classified as medium.
How do I fix CVE-2026-46333?
To fix CVE-2026-46333, update your Linux kernel to the latest version where the vulnerability has been patched.
What are the potential impacts of CVE-2026-46333?
CVE-2026-46333 may allow unauthorized access to process memory, potentially leading to data leakage.
Which versions of the Linux kernel are affected by CVE-2026-46333?
CVE-2026-46333 affects multiple versions of the Linux kernel prior to the fix being applied.
Is CVE-2026-46333 exploitable in a default configuration?
CVE-2026-46333 may be exploitable in certain configurations, especially where ptrace permissions are misconfigured.