diff --git a/meta/recipes-kernel/linux/cve-exclusion.inc b/meta/recipes-kernel/linux/cve-exclusion.inc
index 9012d328..d7ae3b03 100644
--- a/meta/recipes-kernel/linux/cve-exclusion.inc
+++ b/meta/recipes-kernel/linux/cve-exclusion.inc
@@ -206,3 +206,9 @@ host model, no kernel fix exists or is planned, mitigated by firewall configurat
 # https://bugzilla.redhat.com/show_bug.cgi?id=1931327
 CVE_STATUS[CVE-2021-3714] = "upstream-wontfix: inherent design limitation of \
 KSM page deduplication, closed WONTFIX by Red Hat, no upstream fix planned"
+
+# Two fix attempts, neither merged; the fs/exec.c logic is unchanged.
+# An absolute, piped or socket kernel.core_pattern prevents exploitation.
+# https://www.openwall.com/lists/oss-security/2021/10/20/2
+CVE_STATUS[CVE-2021-3864] = "upstream-wontfix: no accepted mainline fix after \
+several attempts, exploitation requires a relative kernel.core_pattern"