PT-2026-64596 · Linux · Linux
CVE-2026-64375
·
Published
2026-07-25
·
Updated
2026-07-25
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In the Linux kernel, the following vulnerability has been resolved:
proc: protect ptrace may access() with exec update lock (FD links)
proc pid get link() and proc pid readlink() currently look up the task from
the pid once, then do the ptrace access check on that task, then look up
the task from the pid a second time to do the actual access.
That's racy in several ways.
To fix it, pass the task to the ->proc get link() handler, and instead of
proc fd access allowed(), introduce a new helper call proc get link() that
looks up and locks the task, does the access check, and calls
->proc get link().
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux