Tracker / CVE-2026-64371
CVE-2026-64371
Medium 5.5
In the Linux kernel, the following vulnerability has been resolved: proc: protect ptrace_may_access() with exec_update_lock (part 1) Fix the easy cases where procfs currently calls ptrace_may_access() without exec_update_lock protection, where the fix is to simply add the extra lock or use mm_access(): - do_task_stat(): grab exec_update_lock - proc_pid_wchan(): grab exec_update_lock - proc_map_files_lookup(): use mm_access() instead of get_task_mm() - proc_map_files_readdir(): use mm_access() instead of get_task_mm() - proc_ns_get_link(): grab exec_update_lock - proc_ns_readlink(): grab exec_update_lock
Affected products and versions
| linux | linux_kernel |
|---|---|
| linux | linux_kernel · 2.6.27.23 → 2.6.28 |
| linux | linux_kernel · 2.6.29.3 → 2.6.30 |
| linux | linux_kernel · 2.6.30.1 → 5.10.261 |
| linux | linux_kernel · 5.11 → 5.15.212 |
| linux | linux_kernel · 5.16 → 6.1.178 |
| linux | linux_kernel · 6.13 → 6.18.40 |
| linux | linux_kernel · 6.19 → 7.1.4 |
| linux | linux_kernel · 6.2 → 6.6.145 |
| linux | linux_kernel · 6.7 → 6.12.97 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.