5.5

CVE-2026-64371: proc: protect ptrace_may_access() with exec_update_lock (part 1)

Modified
AliasesUBUNTU-CVE-2026-64371DEBIAN-CVE-2026-64371
Published 25-07-2026Last modified 15-10-2026

Vulnerability summary

CVE-2026-64371 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.13% chance of exploitation in the next 30 days, higher than 2.5% of scored vulnerabilities.

Priority
Routine

Not severe (CVSS 5.5, local access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.13%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 22 · Related 20
MGASA-2026-0336MGASA-2026-0337OPENSUSE-SU-2026:11476-1USN-8726-1USN-8726-2USN-8726-3

Timeline

  1. 25-07-2026
    PublishedVulnerability first disclosed.
  2. 15-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: proc: protect ptrace_may_access() with exec_update_lock (part 1) Fix the easy cases where procfs currently calls ptrace_may_access() without exec_update_lock protection, where the fix is to simply add the extra lock or use mm_access(): - do_task_stat(): grab exec_update_lock - proc_pid_wchan(): grab exec_update_lock - proc_map_files_lookup(): use mm_access() instead of get_task_mm() - proc_map_files_readdir(): use mm_access() instead of get_task_mm() - proc_ns_get_link(): grab exec_update_lock - proc_ns_readlink(): grab exec_update_lock

CVSS metrics

3 scores · 3 sources · 1 version

EPSS trend

Probability

0.13%

Chance of exploitation in the next 30 days

Percentile

3%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.13% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Version check

Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Ubuntu169 products
  • linuxAll versions (No fix recorded) | < 5.15.0-198.208 | < 6.8.0-147.147 | < 7.0.0-31.31
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.15.0-1117.124 | < 6.8.0-1067.70 | < 7.0.0-1012.12
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian2 products
  • linux< 6.1.180-1 | < 6.12.100-1 | < 7.1.4-1
  • linux-6.12< 6.12.100-1~deb12u1
Linux2 products
  • linux≥ f83ce3e6b02d5e48b3a43b001390e2b58820389d, < ae1e630bcaac739f625822078edbaea98366930d | ≥ f83ce3e6b02d5e48b3a43b001390e2b58820389d, < d54f14655fd7d7b293698a8b6918563c4c0465e7 | ≥ f83ce3e6b02d5e48b3a43b001390e2b58820389d, < bb43679356f1f2a4c6b1c88aec4f021e5b5c74e9 | ≥ f83ce3e6b02d5e48b3a43b001390e2b58820389d, < 7456ae990a9738962b33146916fabca62ae3d4e0 | ≥ f83ce3e6b02d5e48b3a43b001390e2b58820389d, < 4bfe8c481846cee52473a2f7d7b30ee8e6749fc4 | ≥ f83ce3e6b02d5e48b3a43b001390e2b58820389d, < f9b4b03ccc9c69bf7f7298d4559906ebea7143b3 | ≥ f83ce3e6b02d5e48b3a43b001390e2b58820389d, < c1cfd63326f5d09999134e9052c353faf738286e | ≥ f83ce3e6b02d5e48b3a43b001390e2b58820389d, < 6650527444dadc63d84aa939d14ecba4fadb2f69 | 6b06d6282100dd5aacf7d45443d651a1995bd9c4 | 334ed22054b2ec8477e4409e214fc139cf937ef6 | ≥ 2.6.27.23, < 2.6.28 | ≥ 2.6.29.3, < 2.6.30 | 2.6.30
  • linux_kernel≥ 2.6.27.23, < 2.6.28 | ≥ 2.6.29.3, < 2.6.30 | ≥ 2.6.30.1, < 5.10.261 | ≥ 5.11, < 5.15.212 | ≥ 5.16, < 6.1.178 | ≥ 6.2, < 6.6.145 | ≥ 6.7, < 6.12.97 | ≥ 6.13, < 6.18.40 | ≥ 6.19, < 7.1.4 | 2.6.30 | 2.6.30:rc5 | 2.6.30:rc6 | 2.6.30:rc7 | 2.6.30:rc8

3 vendors · 173 products

References

34 links
Show all 34 references