CVE-2026-64111 Details
Description
In the Linux kernel, the following vulnerability has been resolved: lsm: hold cred_guard_mutex for lsm_set_self_attr() Just as proc_pid_attr_write() already does before calling the LSM hook. This only matters for SELinux and AppArmor which check whether the process is being ptraced and if so, whether to allow the transition.
A vulnerability exists in the Linux kernel's handling of the 'lsm_set_self_attr' function within the 'lsm_syscalls' module. This issue affects the stable branch of the Linux kernel and is particularly relevant for SELinux and AppArmor, which monitor process tracing to determine whether to permit certain transitions. The vulnerability arises because the 'cred_guard_mutex' is not properly held during the execution of 'lsm_set_self_attr', potentially leading to unauthorized attribute changes. The issue has been addressed by modifying the function to lock the mutex, aligning its behavior with 'proc_pid_attr_write', which already includes this safeguard.
The vulnerability has been fixed in the Linux kernel. Users should upgrade to the latest version available in the Linux kernel stable tree.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/4a9b16541ad3faf8bccb398532bf3f8b6bbf1188 | kernel.org | Patch |
| https://git.kernel.org/stable/c/5b906f31e977286888a9e31282589b545b249139 | kernel.org | Patch |
| https://git.kernel.org/stable/c/82d3acee88593e3d9e71cad4b7d6b3cf70de9d07 | kernel.org | Patch |
| https://git.kernel.org/stable/c/a010cadaf5727b8417f62fe9021fcef14a5f9b51 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.8, < 6.12.92 >= 6.13, < 6.18.34 >= 6.19, < 7.0.11 7.1 rc1 7.1 rc2 7.1 rc3 7.1 rc4 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 12, 2026 | Initial Analysis | [email protected] |
| Jul 20, 2026 | CVE Modified | kernel.org |
| Jul 20, 2026 | CVE Modified | kernel.org |
| Jul 19, 2026 | New CVE Received | kernel.org |