proc: protect ptrace_may_access() with exec_update_lock (FD links)

MITRE NVD CVE.ORG JSON API

Summary

CVECVE-2026-64375
StatePUBLISHED
AssignerLinux
Source PriorityCVE Program / NVD first with legacy fallback
Published2026-07-25 10:17:20 UTC
Updated2026-07-27 05:16:44 UTC
DescriptionIn the Linux kernel, the following vulnerability has been resolved: proc: protect ptrace_may_access() with exec_update_lock (FD links) proc_pid_get_link() and proc_pid_readlink() currently look up the task from the pid once, then do the ptrace access check on that task, then look up the task from the pid a second time to do the actual access. That's racy in several ways. To fix it, pass the task to the ->proc_get_link() handler, and instead of proc_fd_access_allowed(), introduce a new helper call_proc_get_link() that looks up and locks the task, does the access check, and calls ->proc_get_link().

Risk And Classification

Primary CVSS: v3.1 7.8 HIGH from 416baaa9-dc9f-4396-8d5f-8c081fb06d67

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.001290000 probability, percentile 0.029490000 (date 2026-07-27)

VersionSourceTypeScoreSeverityVector
3.1416baaa9-dc9f-4396-8d5f-8c081fb06d67Secondary7.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
3.1CNADECLARED7.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v3.1 Breakdown

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Vendor Declared Affected Products

SourceVendorProductVersionPlatforms
CNA Linux Linux affected 778c1144771f0064b6f51bee865cceb0d996f2f9 6253dfee5afba536bb54fc6fe6c091c3758fafe1 git Not specified
CNA Linux Linux affected 778c1144771f0064b6f51bee865cceb0d996f2f9 65bf0d2b6e914f1448d6a2fde193dcf60936a651 git Not specified
CNA Linux Linux affected 778c1144771f0064b6f51bee865cceb0d996f2f9 de497d7aa2fae453a7e7c8f7d3e8682e565e3aaf git Not specified
CNA Linux Linux affected 778c1144771f0064b6f51bee865cceb0d996f2f9 138c692d2b2d63d26f2eb957d0e4fcc5d61f9ff2 git Not specified
CNA Linux Linux affected 778c1144771f0064b6f51bee865cceb0d996f2f9 83b17872e3166c295c599279fc9562ac3840c638 git Not specified
CNA Linux Linux affected 778c1144771f0064b6f51bee865cceb0d996f2f9 497c6bae5167428596575f20af6613ff5671f383 git Not specified
CNA Linux Linux affected 778c1144771f0064b6f51bee865cceb0d996f2f9 dfd1894cb64cbd8758b461ed713800fe73db4f82 git Not specified
CNA Linux Linux affected 778c1144771f0064b6f51bee865cceb0d996f2f9 6255da28d4bb5349fe18e84cb043ccd394eba75d git Not specified
CNA Linux Linux affected 2.6.18 Not specified
CNA Linux Linux unaffected 2.6.18 semver Not specified
CNA Linux Linux unaffected 5.10.261 5.10.* semver Not specified
CNA Linux Linux unaffected 5.15.212 5.15.* semver Not specified
CNA Linux Linux unaffected 6.1.178 6.1.* semver Not specified
CNA Linux Linux unaffected 6.6.145 6.6.* semver Not specified
CNA Linux Linux unaffected 6.12.97 6.12.* semver Not specified
CNA Linux Linux unaffected 6.18.40 6.18.* semver Not specified
CNA Linux Linux unaffected 7.1.4 7.1.* semver Not specified
CNA Linux Linux unaffected 7.2-rc1 * original_commit_for_fix Not specified

References

ReferenceSourceLinkTags
git.kernel.org/stable/c/6253dfee5afba536bb54fc6fe6c091c3758fafe1 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/65bf0d2b6e914f1448d6a2fde193dcf60936a651 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/83b17872e3166c295c599279fc9562ac3840c638 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/138c692d2b2d63d26f2eb957d0e4fcc5d61f9ff2 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/6255da28d4bb5349fe18e84cb043ccd394eba75d 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/de497d7aa2fae453a7e7c8f7d3e8682e565e3aaf 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/497c6bae5167428596575f20af6613ff5671f383 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/dfd1894cb64cbd8758b461ed713800fe73db4f82 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report