A local privilege validation flaw in the Linux kernel affects LSM attribute setting, posing risks to system integrity and confidentiality.

This is a privilege management flaw involving Linux Security Modules where lsm_set_self_attr() fails to hold the cred_guard_mutex lock. The attacker authentication level requires local low privileges with no user interaction.

A successful exploit could allow a locally authenticated user to compromise confidentiality and integrity by bypassing security module checks during process transitions. This undermines system hardening controls provided by SELinux or AppArmor. The CVSS score of 7.1 highlights a high severity risk for multi tenant environments or systems with untrusted local user access.

Immediate Action: Update the Linux kernel to version 6.12.92, 6.18.34, 7.0.11, or later depending on the active release branch.

Proactive Monitoring: Monitor system audit logs for anomalous process tracing activity or unauthorized attempts to alter security module attributes.

Compensating Controls: Restrict local shell access and implement strict principle of least privilege policies to prevent untrusted users from executing arbitrary code locally.

Public Exploit Available: false

The vulnerability represents a significant high severity local security risk that requires prompt attention in environments allowing untrusted local shell access. Administrators must apply the official kernel patch or update to the fixed package versions as soon as possible to ensure full enforcement of SELinux and AppArmor policies.