Description
In the Linux kernel, the following vulnerability has been resolved:
ptrace: slightly saner 'get_dumpable()' logic
The 'dumpability' of a task is fundamentally about the memory image of
the task - the concept comes from whether it can core dump or not - and
makes no sense when you don't have an associated mm.
And almost all users do in fact use it only for the case where the task
has a mm pointer.
But we have one odd special case: ptrace_may_access() uses 'dumpable' to
check various other things entirely independently of the MM (typically
explicitly using flags like PTRACE_MODE_READ_FSCREDS). Including for
threads that no longer have a VM (and maybe never did, like most kernel
threads).
It's not what this flag was designed for, but it is what it is.
The ptrace code does check that the uid/gid matches, so you do have to
be uid-0 to see kernel thread details, but this means that the
traditional "drop capabilities" model doesn't make any difference for
this all.
Make it all make a *bit* more sense by saying that if you don't have a
MM pointer, we'll use a cached "last dumpability" flag if the thread
ever had a MM (it will be zero for kernel threads since it is never
set), and require a proper CAP_SYS_PTRACE capability to override.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Linux | Linux | 3.16.52 – < 3.17, 4.4.40 – < 4.5, 4.8.16 – < 4.9, 4.9.1 – < 4.10, 4.10 | 3.17 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 7.0.7-1 | — |
| Debian 13 | linux | 6.12.88-1 | — |
| Debian 12 | linux | 6.1.172-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Nvidia-BlueField 24.04 LTS | linux-bluefield | 6.8.0-1023.27 | — |
| Ubuntu Nvidia-BlueField 22.04 LTS | linux-bluefield | 5.15.0-1093.95 | — |
| Ubuntu 26.04 LTS | linux | 7.0.0-22.22 | USN-8370-1 |
| Ubuntu 26.04 LTS | linux-aws +1 | 7.0.0-1006.6 | USN-8370-1 |
| Ubuntu 26.04 LTS | linux-gcp +1 | 7.0.0-1005.5 | USN-8370-1 |
| Ubuntu 26.04 LTS | linux-ibm +1 | 7.0.0-1007.7 | USN-8461-1, USN-8370-1 |
| Ubuntu 26.04 LTS | linux-nvidia | 7.0.0-1009.9 | USN-8370-1 |
| Ubuntu 26.04 LTS | linux-oem-7.0 | 7.0.0-1008.8 | USN-8489-1 |
| Ubuntu 26.04 LTS | linux-raspi | 7.0.0-1011.11 | USN-8370-1 |
| Ubuntu 26.04 LTS | linux-riscv +1 | 7.0.0-22.22.1 | USN-8370-1 |
| Ubuntu 25.10 | linux | 6.17.0-35.35 | USN-8371-1 |
| Ubuntu 25.10 | linux-aws +1 | 6.17.0-1017.17 | USN-8371-1 |
| Ubuntu 25.10 | linux-azure-fde | No fix yet | — |
| Ubuntu 25.10 | linux-gcp | 6.17.0-1018.19 | USN-8374-1 |
| Ubuntu 25.10 | linux-oracle | 6.17.0-1016.16 | USN-8371-1 |
| Ubuntu 25.10 | linux-raspi | 6.17.0-1018.18 | USN-8371-1 |
| Ubuntu 25.10 | linux-realtime | 6.17.0-1014.16 | USN-8371-1 |
| Ubuntu 25.10 | linux-riscv | 6.17.0-35.35.1 | — |
| Ubuntu 24.04 LTS | linux | 6.8.0-124.124 | USN-8373-1 |
| Ubuntu 24.04 LTS | linux-aws | 6.8.0-1057.60 | USN-8373-1 |
| Ubuntu 24.04 LTS | linux-aws-6.17 +1 | 6.17.0-1017.17~24.04.1 | USN-8374-1, USN-8371-1 |
| Ubuntu 24.04 LTS | linux-azure | 6.8.0-1058.64 | USN-8373-1 |
| Ubuntu 24.04 LTS | linux-azure-fde | 6.8.0-1058.65 | — |
| Ubuntu 24.04 LTS | linux-azure-nvidia | 6.8.0-1039.42 | — |
| Ubuntu 24.04 LTS | linux-gcp | 6.8.0-1060.63 | USN-8373-1 |
| Ubuntu 24.04 LTS | linux-gcp-6.17 | 6.17.0-1018.19~24.04.1 | USN-8374-1 |
| Ubuntu 24.04 LTS | linux-gke | 6.8.0-1055.61 | USN-8373-1 |
| Ubuntu 24.04 LTS | linux-gkeop | 6.8.0-1042.45 | USN-8373-1 |
| Ubuntu 24.04 LTS | linux-hwe-6.17 | 6.17.0-35.35~24.04.1 | USN-8371-1 |
| Ubuntu 24.04 LTS | linux-hwe-7.0 | 7.0.0-28.28~24.04.1 | USN-8569-1 |
| Ubuntu 24.04 LTS | linux-ibm | 6.8.0-1057.58 | USN-8373-1 |
| Ubuntu 24.04 LTS | linux-lowlatency | 6.8.0-134.134.1 | USN-8497-1 |
| Ubuntu 24.04 LTS | linux-nvidia | 6.8.0-1055.58 | USN-8373-1 |
| Ubuntu 24.04 LTS | linux-nvidia-6.17 | 6.17.0-1021.21 | USN-8371-1 |
| Ubuntu 24.04 LTS | linux-nvidia-lowlatency | 6.8.0-1055.58.1 | USN-8373-1 |
| Ubuntu 24.04 LTS | linux-nvidia-tegra | 6.8.0-1026.26 | USN-8373-1 |
| Ubuntu 24.04 LTS | linux-oem-6.17 | 6.17.0-1024.24 | USN-8371-1 |
| Ubuntu 24.04 LTS | linux-oracle | 6.8.0-1054.55 | USN-8373-1 |
| Ubuntu 24.04 LTS | linux-oracle-6.17 | 6.17.0-1016.16~24.04.1 | USN-8371-1 |
| Ubuntu 24.04 LTS | linux-raspi | 6.8.0-1057.61 | USN-8373-1 |
| Ubuntu 24.04 LTS | linux-riscv +18 | No fix yet | — |
| Ubuntu 24.04 LTS | linux-riscv-6.17 | 6.17.0-35.35.1~24.04.1 | — |
| Ubuntu 24.04 LTS | linux-xilinx | 6.8.0-1032.33 | USN-8499-1 |
Show 10 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 22.04 LTS | linux +1 | 5.15.0-181.191 | USN-8388-1 |
| Ubuntu 22.04 LTS | linux-aws | 5.15.0-1109.116 | USN-8388-1 |
| Ubuntu 22.04 LTS | linux-aws-6.8 | 6.8.0-1057.60~22.04.1 | USN-8373-1 |
| Ubuntu 22.04 LTS | linux-azure +1 | 5.15.0-1114.123 | USN-8426-2 |
| Ubuntu 22.04 LTS | linux-azure-6.8 | 6.8.0-1059.65~22.04.1 | USN-8440-1 |
| Ubuntu 22.04 LTS | linux-azure-fde-6.8 | 6.8.0-1058.65~22.04.1 | — |
| Ubuntu 22.04 LTS | linux-gcp | 5.15.0-1109.118 | USN-8388-1 |
| Ubuntu 22.04 LTS | linux-gcp-6.8 | 6.8.0-1060.63~22.04.1 | USN-8373-1 |
| Ubuntu 22.04 LTS | linux-gke | 5.15.0-1105.111 | USN-8388-1 |
| Ubuntu 22.04 LTS | linux-gkeop | 5.15.0-1092.100 | USN-8388-1 |
| Ubuntu 22.04 LTS | linux-hwe-6.8 +1 | 6.8.0-124.124~22.04.1 | USN-8373-1 |
| Ubuntu 22.04 LTS | linux-ibm +1 | 5.15.0-1103.106 | USN-8388-1 |
| Ubuntu 22.04 LTS | linux-ibm-6.8 | 6.8.0-1057.58~22.04.1 | USN-8373-1 |
| Ubuntu 22.04 LTS | linux-intel-iotg | 5.15.0-1104.110 | USN-8388-1 |
| Ubuntu 22.04 LTS | linux-kvm | 5.15.0-1101.106 | USN-8388-1 |
| Ubuntu 22.04 LTS | linux-lowlatency-hwe-6.8 | 6.8.0-134.134.1~22.04.1 | USN-8497-1 |
| Ubuntu 22.04 LTS | linux-nvidia | 5.15.0-1104.105 | USN-8388-1 |
| Ubuntu 22.04 LTS | linux-nvidia-6.8 | 6.8.0-1055.58~22.04.1 | USN-8373-1 |
| Ubuntu 22.04 LTS | linux-nvidia-tegra | 5.15.0-1061.61 | USN-8388-1 |
| Ubuntu 22.04 LTS | linux-nvidia-tegra-igx | 5.15.0-1050.50 | USN-8388-1 |
| Ubuntu 22.04 LTS | linux-oracle | 5.15.0-1106.112 | USN-8388-1 |
| Ubuntu 22.04 LTS | linux-oracle-6.8 | 6.8.0-1054.55~22.04.1 | USN-8373-1 |
| Ubuntu 22.04 LTS | linux-riscv +32 | No fix yet | — |
| Ubuntu 22.04 LTS | linux-xilinx-zynqmp | 5.15.0-1074.78 | USN-8528-1 |
| Ubuntu 20.04 LTS | linux-gke +28 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-gcp +14 | No fix yet | — |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
| Ubuntu Pro Realtime 24.04 LTS | linux-raspi-realtime | 6.8.0-2046.47 | USN-8373-1 |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime | 6.8.1-1052.53 | USN-8373-1 |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime-6.14 | No fix yet | — |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime-6.17 | 6.17.0-1014.16~24.04.1 | USN-8371-1 |
| Ubuntu Pro Realtime 22.04 LTS | linux-intel-iot-realtime | 5.15.0-1101.103 | USN-8388-1 |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime | 5.15.0-1108.117 | USN-8388-1 |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime-6.8 | 6.8.1-1052.53~22.04.1 | USN-8373-1 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-aws-fips | 6.8.0-1057.60+fips1 | USN-8373-1 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-azure-fips | 6.8.0-1059.65+fips1 | USN-8393-1 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-fips | 6.8.0-124.124+fips1 | USN-8373-1 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-gcp-fips | 6.8.0-1060.63+fips1 | USN-8373-1 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-aws-fips | 5.15.0-1109.116+fips1 | USN-8388-1 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-azure-fips | 5.15.0-1114.123+fips1 | USN-8426-1 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-fips | 5.15.0-181.191+fips1 | USN-8388-1 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-gcp-fips | 5.15.0-1109.118+fips1 | USN-8388-1 |
| Ubuntu Pro FIPS-preview 22.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro 20.04 LTS | linux-aws-5.15 | 5.15.0-1109.116~20.04.1 | USN-8388-1 |
| Ubuntu Pro 20.04 LTS | linux-azure-5.15 | 5.15.0-1114.123~20.04.1 | USN-8426-1 |
| Ubuntu Pro 20.04 LTS | linux-gcp-5.15 | 5.15.0-1109.118~20.04.1 | USN-8388-1 |
| Ubuntu Pro 20.04 LTS | linux-hwe-5.15 +1 | 5.15.0-181.191~20.04.1 | USN-8388-1 |
| Ubuntu Pro 20.04 LTS | linux-ibm-5.15 | 5.15.0-1103.106~20.04.1 | USN-8388-1 |
| Ubuntu Pro 20.04 LTS | linux-intel-iotg-5.15 | 5.15.0-1104.110~20.04.1 | — |
| Ubuntu Pro 20.04 LTS | linux-nvidia-tegra-5.15 | 5.15.0-1061.61~20.04.1 | USN-8388-1 |
| Ubuntu Pro 20.04 LTS | linux-oracle-5.15 | 5.15.0-1106.112~20.04.1 | USN-8462-1 |
| Ubuntu Pro 20.04 LTS | linux-riscv-5.15 | 5.15.0-1103.107~20.04.1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | rv +76 | 6.12.0-211.16.1.el10_2 | RHSA-2026:19569 |
| RHEL 9 | rv +75 | 5.14.0-687.10.1.el9_8 | RHSA-2026:19568 |
| RHEL 8 | kernel-rt +12 | 4.18.0-553.125.1.rt7.466.el8_10 | RHSA-2026:19664 |
| RHEL 8 | kpatch-patch-4_18_0-553_109_1 | 1-3.el8_10 | RHSA-2026:23470 |
| RHEL 8 | kpatch-patch-4_18_0-553_40_1 | 1-12.el8_10 | RHSA-2026:23470 |
| RHEL 8 | kpatch-patch-4_18_0-553_53_1 | 1-10.el8_10 | RHSA-2026:23470 |
| RHEL 8 | kpatch-patch-4_18_0-553_72_1 | 1-7.el8_10 | RHSA-2026:23470 |
| RHEL 8 | kpatch-patch-4_18_0-553_85_1 | 1-5.el8_10 | RHSA-2026:23470 |
| RHEL 8 | perf +26 | 4.18.0-553.125.1.el8_10 | RHSA-2026:19666 |
Show 15 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10.0 EUS | rv +77 | 6.12.0-55.75.1.el10_0 | RHSA-2026:20299 |
| RHEL 9.6 EUS | kpatch-patch-5_14_0-570_17_1 | 1-15.el9_6 | RHSA-2026:23468 |
| RHEL 9.6 EUS | kpatch-patch-5_14_0-570_39_1 | 1-6.el9_6 | RHSA-2026:23468 |
| RHEL 9.6 EUS | kpatch-patch-5_14_0-570_66_1 | 1-5.el9_6 | RHSA-2026:23468 |
| RHEL 9.6 EUS | kpatch-patch-5_14_0-570_94_1 | 1-3.el9_6 | RHSA-2026:23468 |
| RHEL 9.6 EUS | rv +77 | 5.14.0-570.116.1.el9_6 | RHSA-2026:20129 |
| RHEL 9.4 EUS | bpftool | 7.3.0-427.126.1.el9_4 | RHSA-2026:20054 |
| RHEL 9.4 EUS | rv +64 | 5.14.0-427.126.1.el9_4 | RHSA-2026:20054 |
| RHEL 9.4 E4S | kpatch-patch-5_14_0-427_100_1 | 1-5.el9_4 | RHSA-2026:24814 |
| RHEL 9.4 E4S | kpatch-patch-5_14_0-427_113_1 | 1-3.el9_4 | RHSA-2026:24814 |
| RHEL 9.4 E4S | kpatch-patch-5_14_0-427_55_1 | 1-15.el9_4 | RHSA-2026:24814 |
| RHEL 9.4 E4S | kpatch-patch-5_14_0-427_68_2 | 1-12.el9_4 | RHSA-2026:24814 |
| RHEL 9.4 E4S | kpatch-patch-5_14_0-427_84_1 | 1-7.el9_4 | RHSA-2026:24814 |
| RHEL 9.2 E4S | bpftool | 7.0.0-284.172.1.el9_2 | RHSA-2026:20593 |
| RHEL 9.2 E4S | kernel-rt +14 | 5.14.0-284.172.1.rt14.457.el9_2 | RHSA-2026:19875 |
| RHEL 9.2 E4S | kpatch-patch-5_14_0-284_104_1 | 1-16.el9_2 | RHSA-2026:23469 |
| RHEL 9.2 E4S | kpatch-patch-5_14_0-284_117_1 | 1-13.el9_2 | RHSA-2026:23469 |
| RHEL 9.2 E4S | kpatch-patch-5_14_0-284_134_1 | 1-7.el9_2 | RHSA-2026:23469 |
| RHEL 9.2 E4S | kpatch-patch-5_14_0-284_148_1 | 1-5.el9_2 | RHSA-2026:23469 |
| RHEL 9.2 E4S | kpatch-patch-5_14_0-284_158_1 | 1-3.el9_2 | RHSA-2026:23469 |
| RHEL 9.2 E4S | perf +47 | 5.14.0-284.172.1.el9_2 | RHSA-2026:20593 |
| RHEL 9.0 E4S | kernel-rt +12 | 5.14.0-70.180.1.rt21.252.el9_0 | RHSA-2026:19711 |
| RHEL 9.0 E4S | perf +28 | 5.14.0-70.180.1.el9_0 | RHSA-2026:19705 |
| RHEL 8.8 TUS | perf +17 | 4.18.0-477.143.1.el8_8 | RHSA-2026:19521 |
| RHEL 8.8 E4S | kpatch-patch-4_18_0-477_107_1 | 1-6.el8_8 | RHSA-2026:23471 |
| RHEL 8.8 E4S | kpatch-patch-4_18_0-477_120_1 | 1-5.el8_8 | RHSA-2026:23471 |
| RHEL 8.8 E4S | kpatch-patch-4_18_0-477_130_1 | 1-3.el8_8 | RHSA-2026:23471 |
| RHEL 8.8 E4S | kpatch-patch-4_18_0-477_89_1 | 1-12.el8_8 | RHSA-2026:23471 |
| RHEL 8.8 E4S | kpatch-patch-4_18_0-477_97_1 | 1-10.el8_8 | RHSA-2026:23471 |
| RHEL 8.8 E4S | perf +18 | 4.18.0-477.143.1.el8_8 | RHSA-2026:19521 |
| RHEL 8.6 TUS | perf +17 | 4.18.0-372.193.1.el8_6 | RHSA-2026:20051 |
| RHEL 8.6 E4S | perf +25 | 4.18.0-372.193.1.el8_6 | RHSA-2026:20051 |
| RHEL 8.6 AUS | perf +17 | 4.18.0-372.193.1.el8_6 | RHSA-2026:20051 |
| RHEL 8.4 EUS Long Life | perf +17 | 4.18.0-305.192.1.el8_4 | RHSA-2026:20130 |
| RHEL 8.4 AUS | perf +17 | 4.18.0-305.192.1.el8_4 | RHSA-2026:20130 |
| Red Hat OpenShift 4 | cri-o | 1.33.12-3.rhaos4.20.git64c6a00.el9 | RHSA-2026:21701 |
| Red Hat OpenShift 4 | openshift +5 | 4.20.0-202605141748.p2.g2a0461f.assembly.stream.el8 | RHSA-2026:21701 |
| Red Hat OpenShift 4 | openshift-clients +1 | 4.20.0-202605211651.p2.g02b0b2d.assembly.stream.el8 | RHSA-2026:21701 |
| Red Hat OpenShift 4 | rv +105 | 5.14.0-570.117.1.el9_6 | RHSA-2026:21701 |
| Red Hat Enterprise Linux Nvidia 10 | rv +35 | 6.12.0-211.8.el10nv | RHSA-2026:33486, RHSA-2026:19540 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | kernel-doc +1 | 6.12.0-124.56.5.el10_1 | ALSA-2026:A010, ALSA-2026:19569 |
| AlmaLinux 10 | rv +72 | 6.12.0-211.16.1.el10_2 | ALSA-2026:19569 |
| AlmaLinux 9 | rv +116 | 5.14.0-611.54.6.el9_7 | ALSA-2026:A009, ALSA-2026:19568 |
| AlmaLinux 8 | kernel-rt +9 | 4.18.0-553.125.1.rt7.466.el8_10 | ALSA-2026:19664 |
| AlmaLinux 8 | perf +29 | 4.18.0-553.124.4.el8_10 | ALSA-2026:A008, ALSA-2026:19666 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | kernel | 6.12.0-211.16.1.el10_2.0.1 | RLSA-2026:19569 |
| Rocky Linux 9 | kernel | 5.14.0-687.10.1.el9_8.0.1 | RLSA-2026:19568 |
| Rocky Linux 8 | kernel | 4.18.0-553.125.1.el8_10 | RLSA-2026:19666 |
| Rocky Linux 8 | kernel-rt | 4.18.0-553.125.1.rt7.466.el8_10 | RLSA-2026:19664 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | kernel-64kb +7 | 6.4.0-150700.53.78.1 | SUSE-SU-2026:3790-1 |
| SLES 15 SP7 | kernel-default-base | 6.4.0-150700.53.78.1.150700.17.43.2 | SUSE-SU-2026:3790-1 |
| SLES 15 SP6 | kernel-64kb +6 | 6.4.0-150600.23.130.1 | SUSE-SU-2026:3602-1 |
| SLES 15 SP6 | kernel-default-base | 6.4.0-150600.23.130.1.150600.12.60.3 | SUSE-SU-2026:3602-1 |
| SLES 15 SP5 | kernel-64kb +6 | 5.14.21-150500.55.182.1 | SUSE-SU-2026:3595-1 |
| SLES 15 SP5 | kernel-default-base | 5.14.21-150500.55.182.1.150500.6.85.2 | SUSE-SU-2026:3595-1 |
| SLES 15 SP4 | kernel-64kb +6 | 5.14.21-150400.24.235.1 | SUSE-SU-2026:3593-1 |
| SLES 15 SP4 | kernel-default-base | 5.14.21-150400.24.235.1.150400.24.118.3 | SUSE-SU-2026:3593-1 |
Show 18 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_0 | 13-160000.4.3 | SUSE-SU-2026:22039-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_1 | 11-160000.1.1 | SUSE-SU-2026:22031-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_2 | 9-160000.1.1 | SUSE-SU-2026:22038-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_3 | 8-160000.1.1 | SUSE-SU-2026:22030-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_4 | 7-160000.1.1 | SUSE-SU-2026:22033-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_5 | 6-160000.1.1 | SUSE-SU-2026:22040-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_6 | 5-160000.1.1 | SUSE-SU-2026:22035-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_7 | 4-160000.1.1 | SUSE-SU-2026:22032-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_8 | 3-160000.1.1 | SUSE-SU-2026:22034-1 |
| SLES for SAP 16.0 | kernel-livepatch-SLE16_Update_9 +1 | 2-160000.1.1 | SUSE-SU-2026:22037-1, SUSE-SU-2026:22029-1 |
| SLES for SAP 15 SP6 | kernel-default-base | 6.4.0-150600.23.130.1.150600.12.60.3 | SUSE-SU-2026:3602-1 |
| SLES for SAP 15 SP6 | kernel-docs +4 | 6.4.0-150600.23.130.1 | SUSE-SU-2026:3602-1 |
| SLES for SAP 15 SP5 | kernel-default-base | 5.14.21-150500.55.182.1.150500.6.85.2 | SUSE-SU-2026:3595-1 |
| SLES for SAP 15 SP5 | kernel-docs +4 | 5.14.21-150500.55.182.1 | SUSE-SU-2026:3595-1 |
| SLES for SAP 15 SP4 | kernel-default-base | 5.14.21-150400.24.235.1.150400.24.118.3 | SUSE-SU-2026:3593-1 |
| SLES for SAP 15 SP4 | kernel-docs +4 | 5.14.21-150400.24.235.1 | SUSE-SU-2026:3593-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_0 | 13-160000.4.3 | SUSE-SU-2026:22039-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_1 | 11-160000.1.1 | SUSE-SU-2026:22031-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_2 | 9-160000.1.1 | SUSE-SU-2026:22038-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_3 | 8-160000.1.1 | SUSE-SU-2026:22030-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_4 | 7-160000.1.1 | SUSE-SU-2026:22033-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_5 | 6-160000.1.1 | SUSE-SU-2026:22040-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_6 | 5-160000.1.1 | SUSE-SU-2026:22035-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_7 | 4-160000.1.1 | SUSE-SU-2026:22032-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_8 | 3-160000.1.1 | SUSE-SU-2026:22034-1 |
| SLES 16.0 | kernel-livepatch-SLE16_Update_9 +1 | 2-160000.1.1 | SUSE-SU-2026:22037-1, SUSE-SU-2026:22029-1 |
| SLE Micro 6.2 | kernel-livepatch-SLE16_Update_5 | 6-160000.1.1 | SUSE-SU-2026:22042-1 |
| SLE Micro 6.2 | kernel-syms +1 | 6.12.0-160000.32.1 | SUSE-SU-2026:21834-1, SUSE-RU-2026:21781-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_19 +1 | 3-1.1 | SUSE-SU-2026:22488-1, SUSE-SU-2026:22462-1 |
| SLE Micro 6.1 | kernel-livepatch-MICRO-6-0_Update_20 +1 | 2-1.1 | SUSE-SU-2026:22489-1, SUSE-SU-2026:22474-1 |
| SLE Micro 6.1 | kernel-rt +4 | 6.4.0-51.1 | SUSE-SU-2026:23194-1, SUSE-SU-2026:23193-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_19 +1 | 3-1.1 | SUSE-SU-2026:22411-1, SUSE-SU-2026:22402-1 |
| SLE Micro 6.0 | kernel-livepatch-MICRO-6-0_Update_20 +1 | 2-1.1 | SUSE-SU-2026:22425-1, SUSE-SU-2026:22412-1 |
| SLE Micro 6.0 | kernel-rt +4 | 6.4.0-51.1 | SUSE-SU-2026:23244-1, SUSE-SU-2026:23241-1 |
| SLE Micro 5.5 | kernel-default-base | 5.14.21-150500.55.182.1.150500.6.85.2 | SUSE-SU-2026:3595-1 |
| SLE Micro 5.5 | kernel-rt +1 | 5.14.21-150500.13.156.1 | SUSE-SU-2026:3617-1 |
| SLE Micro 5.5 | kernel-source +1 | 5.14.21-150500.55.182.1 | SUSE-SU-2026:3595-1 |
| SLE Micro 5.4 | kernel-default-base | 5.14.21-150400.24.235.1.150400.24.118.3 | SUSE-SU-2026:3593-1 |
| SLE Micro 5.4 | kernel-rt +1 | 5.14.21-150400.15.181.1 | SUSE-SU-2026:3616-1 |
| SLE Micro 5.4 | kernel-source +1 | 5.14.21-150400.24.235.1 | SUSE-SU-2026:3593-1 |
| SLE Micro 5.3 | kernel-default-base | 5.14.21-150400.24.235.1.150400.24.118.3 | SUSE-SU-2026:3593-1 |
| SLE Micro 5.3 | kernel-rt +1 | 5.14.21-150400.15.181.1 | SUSE-SU-2026:3616-1 |
| SLE Micro 5.3 | kernel-source +1 | 5.14.21-150400.24.235.1 | SUSE-SU-2026:3593-1 |
| SLE Live Patching 15 SP7 | kernel-default | 6.4.0-150700.53.78.1 | SUSE-SU-2026:3790-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7-RT_Update_19 | 1-150700.1.5.1 | SUSE-SU-2026:3810-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7_Update_20 | 1-150700.15.3.2 | SUSE-SU-2026:3790-1 |
| SLE Live Patching 15 SP6 | kernel-default | 6.4.0-150600.23.130.1 | SUSE-SU-2026:3602-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_30 | 1-150600.13.5.1 | SUSE-SU-2026:3602-1 |
| SLE Live Patching 15 SP5 | kernel-default | 5.14.21-150500.55.182.1 | SUSE-SU-2026:3595-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_44 | 1-150500.11.5.1 | SUSE-SU-2026:3595-1 |
| SLE Live Patching 15 SP4 | kernel-default | 5.14.21-150400.24.235.1 | SUSE-SU-2026:3593-1 |
| SLE Live Patching 15 SP4 | kernel-livepatch-SLE15-SP4_Update_58 | 1-150400.9.7.1 | SUSE-SU-2026:3593-1 |
| SLE HPC 15 SP5 | kernel-64kb +5 | 5.14.21-150500.55.182.1 | SUSE-SU-2026:3595-1 |
| SLE HPC 15 SP5 | kernel-default-base | 5.14.21-150500.55.182.1.150500.6.85.2 | SUSE-SU-2026:3595-1 |
| SLE HPC 15 SP4 | kernel-64kb +5 | 5.14.21-150400.24.235.1 | SUSE-SU-2026:3593-1 |
| SLE HPC 15 SP4 | kernel-default-base | 5.14.21-150400.24.235.1.150400.24.118.3 | SUSE-SU-2026:3593-1 |
| SUSE Real Time Module 15 SP7 | kernel-rt +2 | 6.4.0-150700.7.72.1 | SUSE-SU-2026:3810-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | kernel-source | 7.0.9-1.1 | openSUSE-SU-2026:10825-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | kernel-livepatch-6.18.30-61.116 +2 | 1:1.0-0.amzn2023 | ALAS2023-2026-1754, ALAS2023-2026-1753, ALAS2023-2026-1752 |
| Amazon Linux 2023 | perf +11 | 1:6.1.172-216.329.amzn2023 | ALAS2023-2026-1752 |
| Amazon Linux 2023 | perf6.12 +11 | 1:6.12.88-119.157.amzn2023 | ALAS2023-2026-1753 |
| Amazon Linux 2023 | perf6.18 +11 | 1:6.18.30-61.116.amzn2023 | ALAS2023-2026-1754 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | kernel | 6.6.139.1-1 | — |
| Azure Linux 3 | kernel-hwe | 6.12.89.1-1 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 10 | rv +29 | 6.12.0-211.34.1.el10_2 | ELSA-2026-19569 |
| Oracle Linux 9 | kernel-uek +34 | 6.12.0-202.76.4.3.el10uek | ELSA-2026-50372, ELSA-2026-50293, ELSA-2026-50279 |
| Oracle Linux 9 | rv +28 | 5.14.0-687.17.1.el9_8 | ELSA-2026-19568 |
| Oracle Linux 8 | kernel-uek +17 | 5.15.0-320.202.8.4.el9uek | ELSA-2026-50294, ELSA-2026-50280 |
| Oracle Linux 8 | perf +19 | 4.18.0-553.125.1.el8_10 | ELSA-2026-50294, ELSA-2026-50280, ELSA-2026-19666 |
| Oracle Linux 7 | kernel-uek +6 | 5.4.17-2136.355.3.3.el8uek | ELSA-2026-50299, ELSA-2026-50281 |
| Oracle Linux 7 | kernel-uek-tools | 5.4.17-2136.355.3.3.el7uek | ELSA-2026-50299, ELSA-2026-50281 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
GitHub 5 repositories
-
ashrafzaryouh/CVE-2026-46333 ★ 44 · May 17, 2026
CVE-2026-46333
-
KaraZajac/CHARON ★ 8 · May 16, 2026
CHARON — pre-built PoC for CVE-2026-46333 (Linux ptrace mm==NULL fd theft)
-
studiogangster/CVE-2026-46333 ★ 6 · May 17, 2026
Research on `pidfd_getfd(2)`-based file descriptor leakage from privileged SUID processes. Demonstrates race-condition FD capture against OpenSSH `ssh-keysign` and exposure of sensitive root-owned fi…
-
st4rburn/public-passwd ★ 4 · May 17, 2026
Use CVE-2026-46333 and CVE-2026-31431 to change any user's password.
-
dr4mohamed/CVE-2026-46333 ★ 0 · Oct 5, 2026
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 50
- SSA-457936 SSA-457936: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1.7 Siemens ProductCERT · Nov 10, 2026
- USN-8569-1 linux-hwe-7.0 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8373-1 linux, linux-aws, linux-aws-6.8, linux-aws-fips, linux-azure, linux-fips, linux-gcp, linux-gcp-6.8, linux-gcp-fips, linux-gke, linux-gkeop, linux-hwe-6.8, linux-ibm, linux-ibm-6.8, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-nvidia-tegra, linux-oracle, linux-oracle-6.8, linux-raspi, linux-raspi-realtime, linux-realtime, linux-realtime-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8461-1 linux-azure vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8489-1 linux-oem-7.0 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8440-1 linux-azure-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8371-1 linux, linux-aws, linux-azure, linux-azure-6.17, linux-hwe-6.17, linux-nvidia-6.17, linux-oem-6.17, linux-oracle, linux-oracle-6.17, linux-raspi, linux-realtime, linux-realtime-6.17 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8374-1 linux-aws-6.17, linux-gcp, linux-gcp-6.17 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8370-1 linux, linux-aws, linux-gcp, linux-ibm, linux-nvidia, linux-oracle, linux-raspi, linux-realtime vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8497-1 linux-lowlatency, linux-lowlatency-hwe-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8499-1 linux-xilinx vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8393-1 linux-azure-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8528-1 linux-xilinx-zynqmp vulnerabilities Ubuntu Security Notices (USN) · Nov 6, 2026
- USN-8462-1 linux-oracle-5.15 vulnerabilities Ubuntu Security Notices (USN) · Nov 6, 2026
- USN-8426-2 linux-azure vulnerabilities Ubuntu Security Notices (USN) · Nov 6, 2026
- USN-8426-1 linux-azure-5.15, linux-azure-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 6, 2026
- ALSA-2026:19569 Important: kernel security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:19568 Important: kernel security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:A009 Important: kernel security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:A010 Important: kernel security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:19666 Important: kernel security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:19664 Important: kernel-rt security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:A008 Important: kernel security update AlmaLinux Security Advisories · Oct 29, 2026
- ICSA-26-295-11 Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP CISA ICS & IT advisories · Oct 22, 2026
- RHSA-2026:21701 Red Hat Security Advisory: OpenShift Container Platform 4.20.24 packages and security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- WID-SEC-2026-3623 IBM DataPower Gateway: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 18, 2026
- RHSA-2026:19521 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 17, 2026
- RHSA-2026:20593 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- RHSA-2026:19875 Red Hat Security Advisory: kernel-rt security update Red Hat Security Advisories (RHSA) · Oct 16, 2026
- NCSC-2026-0431 Kwetsbaarheden verholpen in IBM DataPower Gateway en onderliggende componenten NCSC-NL (Netherlands) · Oct 16, 2026
- RHSA-2026:20130 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- RHSA-2026:19711 Red Hat Security Advisory: kernel-rt security update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- RHSA-2026:19705 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- RHSA-2026:19568 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 15, 2026
- SSA-019113 SSA-019113: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1.6 Siemens ProductCERT · Oct 13, 2026
- RHSA-2026:33486 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Oct 10, 2026
- RHSA-2026:24814 Red Hat Security Advisory: kpatch-patch security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2026:23471 Red Hat Security Advisory: kpatch-patch-4_18_0-477_107_1, kpatch-patch-4_18_0-477_120_1, kpatch-patch-4_18_0-477_130_1, kpatch-patch-4_18_0-477_89_1, and kpatch-patch-4_18_0-477_97_1 security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2026:23469 Red Hat Security Advisory: kpatch-patch-5_14_0-284_104_1, kpatch-patch-5_14_0-284_117_1, kpatch-patch-5_14_0-284_134_1, kpatch-patch-5_14_0-284_148_1, and kpatch-patch-5_14_0-284_158_1 security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2026:23470 Red Hat Security Advisory: kpatch-patch-4_18_0-553_109_1, kpatch-patch-4_18_0-553_40_1, kpatch-patch-4_18_0-553_53_1, kpatch-patch-4_18_0-553_72_1, and kpatch-patch-4_18_0-553_85_1 security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2026:23468 Red Hat Security Advisory: kpatch-patch-5_14_0-570_17_1, kpatch-patch-5_14_0-570_39_1, kpatch-patch-5_14_0-570_66_1, and kpatch-patch-5_14_0-570_94_1 security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2026:20299 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2026:20129 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2026:20051 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2026:20054 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2026:19666 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2026:19664 Red Hat Security Advisory: kernel-rt security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2026:19569 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- RHSA-2026:19540 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Oct 9, 2026
- USN-8388-1 linux, linux-aws, linux-aws-5.15, linux-aws-fips, linux-fips, linux-gcp, linux-gcp-5.15, linux-gcp-fips, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iot-realtime, linux-intel-iotg, linux-kvm, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-nvidia-tegra-igx, linux-oracle, linux-raspi, linux-realtime vulnerabilities Ubuntu Security Notices (USN) · Oct 8, 2026
References
- https://git.kernel.org/stable/c/93d4ba49d18e3d7fb41a9927c2d0cca5e9dfefd6
- https://git.kernel.org/stable/c/15b828a46f305ae9f05a7c16914b3ce273474205
- https://git.kernel.org/stable/c/4709234fd1b95136ceb789f639b1e7ea5de1b181
- https://git.kernel.org/stable/c/8f907d345bae8f4b3f004c5abc56bf2dfb851ea7
- https://git.kernel.org/stable/c/6e5b51e74a40d377bcd3081dd33fbaa0e1aa7e3d
- https://git.kernel.org/stable/c/2a93a4fac7b6051d3be7cd1b015fe7320cd0404d
- https://git.kernel.org/stable/c/01363cb3fbd0238ffdeb09f53e9039c9edf8a730
- https://git.kernel.org/stable/c/31e62c2ebbfdc3fe3dbdf5e02c92a9dc67087a3a