What is CVE-2026-64111?

CVE-2026-64111 is a unscored severity Linux kernel vulnerability. CVE-2026-64111 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2026-64111?

CVE-2026-64111 has a CVSS score of pending NVD analysis out of 10, rated awaiting scoring severity.

Is there a patch available for CVE-2026-64111?

Yes, CVE-2026-64111 has been patched. Fixed versions include 6.12.92, 6.18.34, 7.0.11 and others.

Is CVE-2026-64111 actively exploited?

CVE-2026-64111 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2026-64111

In the Linux kernel, the following vulnerability has been resolved: lsm: hold cred_guard_mutex for lsm_set_self_attr() Just as proc_pid_attr_write() already does before calling the LSM hook. This only matters for SELinux and AppArmor which check whether the process is being ptraced and if so, whether to allow the transition.

Package Linux Kernel

Published 2026-07-19

Last modified 2026-07-19

Patch available

Yes

Affected versions

Fixed in 6.12.92, 6.18.34, 7.0.11, 7.1 and their respective stable series.

Fixed in

✓ 6.12.92 6.12.x ✓ 6.18.34 6.18.x ✓ 7.0.11 7.0.x ✓ 7.1

References

4 total

Frequently asked questions

What is CVE-2026-64111?

CVE-2026-64111 is a unscored severity Linux kernel vulnerability . CVE-2026-64111 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
Is there a patch available for CVE-2026-64111?

Yes — CVE-2026-64111 has been patched. Fixed versions include 6.12.92, 6.18.34, 7.0.11 and others.
Is CVE-2026-64111 actively exploited?

No — CVE-2026-64111 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.