In the Linux kernel, the following vulnerability has been resolved:
lsm: hold cred_guard_mutex for lsm_set_self_attr()
Just as proc_pid_attr_write() already does before calling the LSM hook. This only matters for SELinux and AppArmor which check whether the process is being ptraced and if so, whether to allow the transition.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade perf6.18-debuginfoUpgrade microvm-kernel6.18Upgrade kernel6.18-toolsUpgrade kernel6.18-debuginfo-common-x86_64Upgrade bpftool6.18-debuginfoUpgrade kernel6.18-headersUpgrade kernel6.18-tools-develUpgrade kernel6.18-modules-extraUpgrade kernel6.18-develUpgrade kernel6.18-debuginfoUpgrade python3-perf6.18-debuginfoUpgrade python3-perf6.18Upgrade bpftool6.18Upgrade perf6.18Upgrade kernel6.18-modules-extra-commonUpgrade kernel6.18Upgrade kernel6.18-debuginfo-common-aarch64Upgrade kernel6.18-tools-debuginfoUpgrade kernel-livepatch-6.18.35-68.127 | Aug 10, 2026 | Jul 19, 2026 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Jul 22, 2026 | Jul 19, 2026 |
| Rocky_linux | — | Upgrade kernel-debug-debuginfoUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debuginfo-common-s390xUpgrade kernel-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-devel-matchedUpgrade kernel-debug-modules-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade rvUpgrade kernel-uki-virtUpgrade kernel-debugUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-modulesUpgrade perf-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-coreUpgrade kernel-zfcpdumpUpgrade perfUpgrade kernel-modulesUpgrade libperfUpgrade kernel-rtUpgrade kernel-rt-modules-coreUpgrade kernel-toolsUpgrade kernel-modules-extra-matchedUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade python3-perf-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-develUpgrade kernel-modules-coreUpgrade python3-perfUpgrade rtlaUpgrade kernel-tools-libs-develUpgrade kernel-debug-uki-virtUpgrade kernel-debuginfoUpgrade kernel-debug-devel-matchedUpgrade kernelUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-develUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-debug-modulesUpgrade kernel-debuginfo-common-x86_64 | Sep 18, 2026 | Sep 16, 2026 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1035-nvidia-tegra-rtUpgrade linux-image-6.8.0-1062-nvidia-lowlatency-64kUpgrade linux-image-7.0.0-1011-oracle-64kUpgrade linux-image-7.0.0-1015-raspiUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-kvmUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-6.8.0-2053-raspi-realtimeUpgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1064-ibmUpgrade linux-image-gkeUpgrade linux-image-6.8.1-1059-realtimeUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1062-nvidiaUpgrade linux-image-7.0.0-1008-oracle-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-raspi-7.0Upgrade linux-image-gcp-6.8Upgrade linux-image-gcp-64k-7.0Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gcp-7.0Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-1064-awsUpgrade linux-image-realtimeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-azure-7.0Upgrade linux-image-6.8.0-1064-raspiUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1062-gke-64kUpgrade linux-image-6.8.0-1062-nvidia-lowlatencyUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-aws-fipsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-7.0Upgrade linux-image-6.8.0-1067-azure-fipsUpgrade linux-image-oracle-64kUpgrade linux-image-7.0.0-2016-nvidia-bos-64kUpgrade linux-image-awsUpgrade linux-image-gke-64k-6.8Upgrade linux-image-aws-64k-7.0Upgrade linux-image-azure-6.8Upgrade linux-image-7.0.0-1016-nvidiaUpgrade linux-image-gcp-64kUpgrade linux-image-7.0.0-1014-azureUpgrade linux-image-xilinx-6.8Upgrade linux-image-virtualUpgrade linux-image-raspi-realtime-7.0Upgrade linux-image-oracle-6.8Upgrade linux-image-laptop-23.10Upgrade linux-image-7.0.0-1015-raspi-realtimeUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-raspi-6.8Upgrade linux-image-oracleUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-139-generic-64kUpgrade linux-image-7.0.0-1008-oracleUpgrade linux-image-nvidia-bos-7.0Upgrade linux-image-nvidia-64k-7.0Upgrade linux-image-generic-64kUpgrade linux-image-7.0.0-1009-aws-64kUpgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-6.8.0-1067-azureUpgrade linux-image-genericUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1062-nvidia-64kUpgrade linux-image-aws-6.8Upgrade linux-image-7.0.0-2016-nvidia-bosUpgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-7.0.0-1016-nvidia-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-7.0.0-1009-awsUpgrade linux-image-azureUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1067-gcp-fipsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibm-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-fipsUpgrade linux-image-azure-fipsUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-nvidiaUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1067-gcp-64kUpgrade linux-image-6.8.0-1061-oracleUpgrade linux-image-6.8.0-1049-gkeopUpgrade linux-image-virtual-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-ibm-7.0Upgrade linux-image-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1064-aws-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-7.0Upgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-139-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-139-genericUpgrade linux-image-azure-lts-24.04Upgrade linux-image-xilinxUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1061-oracle-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1035-nvidia-tegraUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-nvidia-bosUpgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-7.0.0-1011-oracleUpgrade linux-image-6.8.0-139-lowlatencyUpgrade linux-image-6.8.0-1067-gcpUpgrade linux-image-7.0.0-1010-azureUpgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-7.0.0-1010-ibmUpgrade linux-image-azure-fde-7.0Upgrade linux-image-6.8.0-139-fipsUpgrade linux-image-6.8.0-1064-aws-fipsUpgrade linux-image-ibmUpgrade linux-image-gkeopUpgrade linux-image-gke-6.8Upgrade linux-image-gcpUpgrade linux-image-nvidia-bos-64kUpgrade linux-image-gke-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1036-xilinxUpgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-7.0Upgrade linux-image-6.8.0-1062-gkeUpgrade linux-image-oracle-64k-lts-24.04 | Jul 21, 2026 | Jul 20, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 3, 2026 | Jul 19, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub