The Linux kernel's lsm_set_self_attr() routine does not acquire the cred_guard_mutex before performing security checks, violating the mutex locking discipline described in CWE‑412. This omission creates a race condition that a local process can exploit while ptrace checks are underway. By manipulating the timing, an attacker can alter its own security attributes before the mutex is acquired, potentially bypassing SELinux or AppArmor policies and elevating privileges.

All Linux kernel releases that ship with SELinux or AppArmor enabled and that have not yet incorporated the patch fixing the missing cred_guard_mutex acquisition are affected. The CPE list shows kernel 7.1 rc1 through rc4; the issue likely applies to earlier versions as well. For any kernel that supports these Security Module hooks and runs with SELinux/AppArmor, the vulnerability is present unless the patch has been applied.

The CVSS score of 7.1 indicates a High severity. The EPSS score of less than 1% implies a low current exploitation probability. The issue is not listed in the CISA KEV catalog. The attack vector is local; an attacker must trigger a race condition during a ptrace operation to exploit the flaw, as inferred from the description.