{
  "affected": [
    {
      "ranges": [
        {
          "events": [
            {
              "introduced": "f83ce3e6b02d5e48b3a43b001390e2b58820389d"
            },
            {
              "fixed": "ae1e630bcaac739f625822078edbaea98366930d"
            },
            {
              "fixed": "d54f14655fd7d7b293698a8b6918563c4c0465e7"
            },
            {
              "fixed": "bb43679356f1f2a4c6b1c88aec4f021e5b5c74e9"
            },
            {
              "fixed": "7456ae990a9738962b33146916fabca62ae3d4e0"
            },
            {
              "fixed": "4bfe8c481846cee52473a2f7d7b30ee8e6749fc4"
            },
            {
              "fixed": "f9b4b03ccc9c69bf7f7298d4559906ebea7143b3"
            },
            {
              "fixed": "c1cfd63326f5d09999134e9052c353faf738286e"
            },
            {
              "fixed": "6650527444dadc63d84aa939d14ecba4fadb2f69"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        },
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "last_affected": "6b06d6282100dd5aacf7d45443d651a1995bd9c4"
            },
            {
              "last_affected": "334ed22054b2ec8477e4409e214fc139cf937ef6"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        },
        {
          "events": [
            {
              "introduced": "2.6.27.23"
            },
            {
              "fixed": "2.6.28"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        },
        {
          "events": [
            {
              "introduced": "2.6.29.3"
            },
            {
              "fixed": "2.6.30"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Linux",
        "name": "Kernel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "2.6.30"
            },
            {
              "fixed": "5.10.261"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "5.11.0"
            },
            {
              "fixed": "5.15.212"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "5.16.0"
            },
            {
              "fixed": "6.1.178"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.2.0"
            },
            {
              "fixed": "6.6.145"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.7.0"
            },
            {
              "fixed": "6.12.97"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.13.0"
            },
            {
              "fixed": "6.18.40"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.19.0"
            },
            {
              "fixed": "7.1.4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64371.json"
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nproc: protect ptrace_may_access() with exec_update_lock (part 1)\n\nFix the easy cases where procfs currently calls ptrace_may_access() without\nexec_update_lock protection, where the fix is to simply add the extra lock\nor use mm_access():\n\n - do_task_stat(): grab exec_update_lock\n - proc_pid_wchan(): grab exec_update_lock\n - proc_map_files_lookup(): use mm_access() instead of get_task_mm()\n - proc_map_files_readdir(): use mm_access() instead of get_task_mm()\n - proc_ns_get_link(): grab exec_update_lock\n - proc_ns_readlink(): grab exec_update_lock",
  "id": "CVE-2026-64371",
  "modified": "2026-07-27T03:56:11.270112368Z",
  "published": "2026-07-25T08:50:23.981Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/4bfe8c481846cee52473a2f7d7b30ee8e6749fc4"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/6650527444dadc63d84aa939d14ecba4fadb2f69"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/7456ae990a9738962b33146916fabca62ae3d4e0"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/ae1e630bcaac739f625822078edbaea98366930d"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/bb43679356f1f2a4c6b1c88aec4f021e5b5c74e9"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/c1cfd63326f5d09999134e9052c353faf738286e"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/d54f14655fd7d7b293698a8b6918563c4c0465e7"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/f9b4b03ccc9c69bf7f7298d4559906ebea7143b3"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64371.json"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-64371"
    },
    {
      "type": "PACKAGE",
      "url": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
    }
  ],
  "schema_version": "1.8.0",
  "summary": "proc: protect ptrace_may_access() with exec_update_lock (part 1)"
}