CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel, specifically in the handling of process attributes under SELinux and AppArmor, where improper mutex management can lead to unauthorized access during process tracing. This flaw could allow an attacker to bypass security policies, potentially leading to privilege escalation or unauthorized actions within the system. Organizations using Linux with SELinux or AppArmor should prioritize addressing this vulnerability to safeguard their environments against potential exploitation.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: lsm: hold cred_guard_mutex for lsm_set_self_attr() Just as proc_pid_attr_write() already does before calling the LSM hook. This only matters for SELinux and AppArmor which check whether the process is being ptraced and if so, whether to allow the transition.
Related CVEs
Other vulnerabilities affecting the same vendor(s)