CVE-2026-64371 Details
Description
In the Linux kernel, the following vulnerability has been resolved: proc: protect ptrace_may_access() with exec_update_lock (part 1) Fix the easy cases where procfs currently calls ptrace_may_access() without exec_update_lock protection, where the fix is to simply add the extra lock or use mm_access(): - do_task_stat(): grab exec_update_lock - proc_pid_wchan(): grab exec_update_lock - proc_map_files_lookup(): use mm_access() instead of get_task_mm() - proc_map_files_readdir(): use mm_access() instead of get_task_mm() - proc_ns_get_link(): grab exec_update_lock - proc_ns_readlink(): grab exec_update_lock
A vulnerability in the Linux kernel's proc filesystem has been addressed by adding proper locking mechanisms to prevent unauthorized access. The issue arose because certain procfs functions called 'ptrace_may_access()' without the necessary 'exec_update_lock' protection, potentially allowing information leaks to non-privileged processes. The vulnerability affects the Linux kernel stable tree.
The vulnerability has been fixed in the Linux kernel stable tree by updating the affected procfs functions to include the necessary exec update lock or by using the 'mm_access()' function instead of 'get_task_mm()'.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://cert-portal.siemens.com/productcert/html/ssa-019113.html | siemens-SADP | Third Party Advisory |
| https://git.kernel.org/stable/c/4bfe8c481846cee52473a2f7d7b30ee8e6749fc4 | kernel.org | Patch |
| https://git.kernel.org/stable/c/6650527444dadc63d84aa939d14ecba4fadb2f69 | kernel.org | Patch |
| https://git.kernel.org/stable/c/7456ae990a9738962b33146916fabca62ae3d4e0 | kernel.org | Patch |
| https://git.kernel.org/stable/c/ae1e630bcaac739f625822078edbaea98366930d | kernel.org | Patch |
| https://git.kernel.org/stable/c/bb43679356f1f2a4c6b1c88aec4f021e5b5c74e9 | kernel.org | Patch |
| https://git.kernel.org/stable/c/c1cfd63326f5d09999134e9052c353faf738286e | kernel.org | Patch |
| https://git.kernel.org/stable/c/d54f14655fd7d7b293698a8b6918563c4c0465e7 | kernel.org | Patch |
| https://git.kernel.org/stable/c/f9b4b03ccc9c69bf7f7298d4559906ebea7143b3 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 2.6.27.23, < 2.6.28 >= 2.6.29.3, < 2.6.30 >= 2.6.30.1, < 5.10.261 >= 5.11, < 5.15.212 >= 5.16, < 6.1.178 >= 6.2, < 6.6.145 >= 6.7, < 6.12.97 >= 6.13, < 6.18.40 >= 6.19, < 7.1.4 2.6.30 - 2.6.30 rc5 2.6.30 rc6 2.6.30 rc7 2.6.30 rc8 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 8, 2026 | Initial Analysis | [email protected] |
| Sep 8, 2026 | CVE Modified | kernel.org |
| Sep 8, 2026 | CVE Modified | siemens-SADP |
| Aug 17, 2026 | CVE Modified | kernel.org |
| Jul 25, 2026 | New CVE Received | kernel.org |