CVE-2026-64375 addresses a race condition in the Linux kernel's proc filesystem related to ptrace access checks. The functions proc_pid_get_link() and proc_pid_readlink() previously performed two separate task lookups from the pid: one for the ptrace access check and another for actual access, creating a race condition. The vulnerability was mitigated by passing the task to the ->proc_get_link() handler and introducing a new helper call_proc_get_link() that performs a single task lookup, locks the task, performs the access check, and then calls ->proc_get_link(). This change ensures synchronization and prevents race conditions during ptrace access verification.

The vulnerability could allow unauthorized access or manipulation of process information via the proc filesystem due to race conditions in ptrace access checks. The CVSS score of 7.8 (high) indicates that successful exploitation could lead to high confidentiality, integrity, and availability impacts on affected systems.

A fix has been implemented in the Linux kernel to address this vulnerability by modifying the task lookup and locking mechanism in proc_pid_get_link() and proc_pid_readlink(). Users should apply the official kernel updates that include this fix once available. Patch status is not yet confirmed in the provided data; check the Linux kernel vendor advisories for the current remediation guidance.