CVE-2026-64111: lsm: hold cred_guard_mutex for lsm_set_self_attr()
In the Linux kernel, the following vulnerability has been resolved:
lsm: hold credguardmutex for lsmsetselfattr()
Just as procpidattrwrite() already does before calling the LSM hook. This only matters for SELinux and AppArmor which check whether the process is being ptraced and if so, whether to allow the transition.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-64111?
The severity of CVE-2026-64111 is high with a CVSS score of 7.1.
What impact does CVE-2026-64111 have on Linux systems?
CVE-2026-64111 can affect systems utilizing SELinux and AppArmor by potentially allowing unauthorized access to process attributes.
How do I fix CVE-2026-64111?
To fix CVE-2026-64111, update the Linux kernel to the latest version where the vulnerability is patched.
Who is affected by CVE-2026-64111?
Users running vulnerable versions of the Linux kernel with SELinux or AppArmor enabled are affected by CVE-2026-64111.
What are the potential consequences of CVE-2026-64111 exploitation?
Exploitation of CVE-2026-64111 could lead to process attribute manipulation and unauthorized access under certain conditions.