Protection mechanism failure in Linux kernel - CVE-2026-90347
Published: September 18, 2026
Vulnerability identifier: #VU151135
CSH Severity: Low
CVSS v4: 2 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-90347
CWE-ID: CWE-693
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to bypass seccomp and audit checks.
The vulnerability exists due to improper synchronization of the original first syscall argument in arm64 ptrace register and syscall setting code when modifying the first syscall argument during a seccomp ptrace exit. A local user can modify the first syscall argument to bypass seccomp and audit checks.
Affected software
Linux kernel
How to mitigate CVE-2026-90347
Install security update from vendor's repository.
Linux kernel - update to 7.0 rc3