Vulnerability · Published Jul 19, 2026 · Assigned by Linux

CVE-2026-64111lsm: hold cred_guard_mutex for lsm_set_self_attr()

High 7.1

In plain English

A high-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 3% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.1High
Exploit odds (30 days)0.1%top 97.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: lsm: hold cred_guard_mutex for lsm_set_self_attr() Just as proc_pid_attr_write() already does before calling the LSM hook. This only matters for SELinux and AppArmor which check whether the process is being ptraced and if so, whether to allow the transition.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:10kernel6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-64k6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-64k-core6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-64k-debug6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-64k-debug-core6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-64k-debug-devel6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-64k-debug-devel-matched6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-64k-debug-modules6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-64k-debug-modules-core6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-64k-debug-modules-extra6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-64k-devel6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-64k-devel-matched6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-64k-modules6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-64k-modules-core6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-64k-modules-extra6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-abi-stablelists6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-core6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-cross-headers6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-debug6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-debug-core6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-debug-devel6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-debug-devel-matched6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-debug-modules6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-debug-modules-core6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-debug-modules-extra6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-debug-uki-virt6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-devel6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-devel-matched6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-doc6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-headers6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-modules6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-modules-core6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-modules-extra6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-modules-extra-matched6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-rt6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-rt-64k6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-rt-64k-core6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-rt-64k-debug6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-rt-64k-debug-core6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-rt-64k-debug-devel6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-rt-64k-debug-modules6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-rt-64k-debug-modules-core6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-rt-64k-debug-modules-extra6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-rt-64k-devel6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-rt-64k-modules6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-rt-64k-modules-core6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-rt-64k-modules-extra6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-rt-core6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-rt-debug6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-rt-debug-core6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-rt-debug-devel6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-rt-debug-modules6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-rt-debug-modules-core6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-rt-debug-modules-extra6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-rt-devel6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-rt-modules6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-rt-modules-core6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-rt-modules-extra6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-tools6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-tools-libs6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-tools-libs-devel6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-uki-virt6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-uki-virt-addons6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-zfcpdump6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-zfcpdump-core6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-zfcpdump-devel6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-zfcpdump-devel-matched6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-zfcpdump-modules6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-zfcpdump-modules-core6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10kernel-zfcpdump-modules-extra6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10libperf6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10perf6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10python3-perf6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10rtla6.12.0-211.55.1.el10_2ALSA-2026:67471
AlmaLinux:10rv6.12.0-211.55.1.el10_2ALSA-2026:67471
Debian:13linux6.12.94-1DEBIAN-CVE-2026-64111
Debian:14linux7.0.12-1DEBIAN-CVE-2026-64111
Rocky Linux:10kernel0:6.12.0-211.55.1.el10_2RLSA-2026:67471
Ubuntu:24.04:LTSlinux6.8.0-139.139UBUNTU-CVE-2026-64111
Ubuntu:26.04:LTSlinux7.0.0-28.28UBUNTU-CVE-2026-64111
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-aws6.8.0-1064.67UBUNTU-CVE-2026-64111
Ubuntu:26.04:LTSlinux-aws7.0.0-1009.9UBUNTU-CVE-2026-64111
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-aws-6.17no fix listedUBUNTU-CVE-2026-64111
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2026-64111
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2026-64111
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1064.67~22.04.1UBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-azure6.8.0-1067.75UBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-azure6.8.0-1067.75USN-8761-1
Ubuntu:26.04:LTSlinux-azure7.0.0-1010.10UBUNTU-CVE-2026-64111
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-azure-6.17no fix listedUBUNTU-CVE-2026-64111
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2026-64111
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2026-64111
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1067.75~22.04.1USN-8761-3
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1067.75~22.04.1UBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-azure-7.07.0.0-1014.14~24.04.1UBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-azure-fde6.8.0-1065.72UBUNTU-CVE-2026-64111
Ubuntu:26.04:LTSlinux-azure-fde7.0.0-1009.9UBUNTU-CVE-2026-64111
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-azure-fde-6.17no fix listedUBUNTU-CVE-2026-64111
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2026-64111
Ubuntu:22.04:LTSlinux-azure-fde-6.86.8.0-1065.72~22.04.1UBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-azure-fde-7.07.0.0-1013.13~24.04.1UBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-gcp6.8.0-1067.75UBUNTU-CVE-2026-64111
Ubuntu:26.04:LTSlinux-gcp7.0.0-1008.8UBUNTU-CVE-2026-64111
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-gcp-6.17no fix listedUBUNTU-CVE-2026-64111
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2026-64111
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2026-64111
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1067.75~22.04.1UBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-gcp-7.07.0.0-1011.11~24.04.1UBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-gke6.8.0-1062.70UBUNTU-CVE-2026-64111
Ubuntu:26.04:LTSlinux-gke7.0.0-1003.4UBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1049.53UBUNTU-CVE-2026-64111
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-hwe-6.17no fix listedUBUNTU-CVE-2026-64111
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2026-64111
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2026-64111
Ubuntu:22.04:LTSlinux-hwe-6.8no fix listedUBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-hwe-7.07.0.0-28.28~24.04.1UBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-ibm6.8.0-1064.65UBUNTU-CVE-2026-64111
Ubuntu:26.04:LTSlinux-ibm7.0.0-1010.10UBUNTU-CVE-2026-64111
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1066.67~22.04.1UBUNTU-CVE-2026-64111
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-139.139.1UBUNTU-CVE-2026-64111
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2026-64111
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2026-64111
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2026-64111
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-139.139.1~22.04.1UBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1062.65UBUNTU-CVE-2026-64111
Ubuntu:26.04:LTSlinux-nvidia7.0.0-1016.16UBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-nvidia-6.17no fix listedUBUNTU-CVE-2026-64111
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2026-64111
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2026-64111
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1062.65~22.04.1UBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-nvidia-7.07.0.0-1016.16~24.04.1UBUNTU-CVE-2026-64111
Ubuntu:26.04:LTSlinux-nvidia-bos7.0.0-2016.16UBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1062.65.1UBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1035.38UBUNTU-CVE-2026-64111
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2026-64111
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2026-64111
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-oem-6.14no fix listedUBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-oem-6.17no fix listedUBUNTU-CVE-2026-64111
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2026-64111
Ubuntu:26.04:LTSlinux-oem-7.07.0.0-1009.9UBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-oracle6.8.0-1061.64UBUNTU-CVE-2026-64111
Ubuntu:26.04:LTSlinux-oracle7.0.0-1008.8UBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-oracle-6.14no fix listedUBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-oracle-6.17no fix listedUBUNTU-CVE-2026-64111
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2026-64111
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1061.64~22.04.1UBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-oracle-7.07.0.0-1011.11~24.04.1UBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-raspi6.8.0-1064.68UBUNTU-CVE-2026-64111
Ubuntu:26.04:LTSlinux-raspi7.0.0-1015.15UBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2026-64111
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-64111
Ubuntu:26.04:LTSlinux-realtime7.0.0-28.28.1UBUNTU-CVE-2026-64111
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-64111
Ubuntu:26.04:LTSlinux-riscv7.0.0-28.28.1UBUNTU-CVE-2026-64111
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-riscv-6.14no fix listedUBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-riscv-6.17no fix listedUBUNTU-CVE-2026-64111
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2026-64111
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-139.139~22.04.1UBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-riscv-7.07.0.0-28.28.1~24.04.3UBUNTU-CVE-2026-64111
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2026-64111
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2026-64111
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-vmware6.8.0-1008.8UBUNTU-CVE-2026-64111
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1036.37UBUNTU-CVE-2026-64111

Affected products (as reported)

VendorProductVersions
Linux Linux a04a1198088a1378d0389c250cc684f649bcc91e – before 82d3acee88593e3d9e71cad4b7d6b3cf70de9d07a04a1198088a1378d0389c250cc684f649bcc91e – before 5b906f31e977286888a9e31282589b545b249139a04a1198088a1378d0389c250cc684f649bcc91e – before a010cadaf5727b8417f62fe9021fcef14a5f9b51a04a1198088a1378d0389c250cc684f649bcc91e – before 4a9b16541ad3faf8bccb398532bf3f8b6bbf1188
Linux Linux 6.8

References