CyberSIXT Search
NVD
7.1 High
CVE-2026-46333

ptrace: slightly saner 'get_dumpable()' logic

Linux

Status
  • Not in CISA KEV
  • Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
4.3%probability of exploitation in the next 30 days

Higher than 91% of scored CVEs

SeverityCVSS
7.1High

Description NVD

In the Linux kernel, the following vulnerability has been resolved: ptrace: slightly saner 'get_dumpable()' logic The 'dumpability' of a task is fundamentally about the memory image of the task the concept comes from whether it can core dump or not and makes no sense when you don't have an associated mm. And almost all users do in fact use it only for the case where the task has a mm pointer. But we have one odd special case: ptrace_may_access() uses 'dumpable' to check various other things entirely independently of the MM (typically explicitly using flags like PTRACE_MODE_READ_FSCREDS). Including for threads that no longer have a VM (and maybe never did, like most kernel threads). It's not what this flag was designed for, but it is what it is. The ptrace code does check that the uid/gid matches, so you do have to be uid-0 to see kernel thread details, but this means that the traditional "drop capabilities" model doesn't make any difference for this all. Make it all make a bit more sense by saying that if you don't have a MM pointer, we'll use a cached "last dumpability" flag if the thread ever had a MM (it will be zero for kernel threads since it is never set), and r

Coverage 1 article · 1 outlet

First in our coverage: Infosecurity, 21 MayRSS feed
  1. CVE-2026-46333: Linux ptrace flaw leaks SSH keys, patch nowInfosecurity · first in our coverage

References

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.

↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device