CVE-2026-64371: proc: protect ptrace_may_access() with exec_update_lock (part 1)
In the Linux kernel, the following vulnerability has been resolved:
proc: protect ptracemayaccess() with execupdatelock (part 1)
Fix the easy cases where procfs currently calls ptracemayaccess() without execupdatelock protection, where the fix is to simply add the extra lock or use mmaccess():
- dotaskstat(): grab execupdatelock - procpidwchan(): grab execupdatelock - procmapfileslookup(): use mmaccess() instead of gettaskmm() - procmapfilesreaddir(): use mmaccess() instead of gettaskmm() - procnsgetlink(): grab execupdatelock - procnsreadlink(): grab execupdatelock
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.145.2-1
Event History
Frequently Asked Questions
What is the risk level of CVE-2026-64371?
CVE-2026-64371 has a risk level of 28.
What is the severity rating of CVE-2026-64371?
The severity rating of CVE-2026-64371 is medium at 4.7.
How do I fix CVE-2026-64371?
To fix CVE-2026-64371, apply the updates that include the addition of exec_update_lock protection to ptrace_may_access().
Who is affected by CVE-2026-64371?
CVE-2026-64371 affects users of the Microsoft azl3 kernel version 6.6.144.1-1.
When was CVE-2026-64371 published?
CVE-2026-64371 was published on July 25, 2026.