VYPR
← All advisories
Medium severity5.5NVD Advisory· Published Jul 25, 2026· Updated Oct 15, 2026

CVE-2026-64371

CVE-2026-64371

Description

In the Linux kernel, the following vulnerability has been resolved:

proc: protect ptrace_may_access() with exec_update_lock (part 1)

Fix the easy cases where procfs currently calls ptrace_may_access() without exec_update_lock protection, where the fix is to simply add the extra lock or use mm_access():

  • do_task_stat(): grab exec_update_lock
  • proc_pid_wchan(): grab exec_update_lock
  • proc_map_files_lookup(): use mm_access() instead of get_task_mm()
  • proc_map_files_readdir(): use mm_access() instead of get_task_mm()
  • proc_ns_get_link(): grab exec_update_lock
  • proc_ns_readlink(): grab exec_update_lock

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

9
  • Linux/Kernel7 versions
    cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=2.6.27.23,<2.6.28
    • cpe:2.3:o:linux:linux_kernel:2.6.30:-:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:2.6.30:rc5:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:2.6.30:rc6:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:2.6.30:rc7:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:2.6.30:rc8:*:*:*:*:*:*
    • (no CPE)
  • osv-coords2 versions
    pkg:linux/kernelpkg:rpm/opensuse/kernel-source&distro=openSUSE%20Tumbleweed
    >= 2.6.30, < 5.10.261+ 1 more
    • (no CPE)range: >= 2.6.30, < 5.10.261
    • (no CPE)range: < 7.1.7-1.1

Patches

Vulnerability mechanics

References

10

News mentions

2