diff --git a/security/commoncap.c b/security/commoncap.c
index 2e489d6a3ac810459fec065783fad855a8738216..4ab1c37f2d19f25800b56e9831d5e629c3135982 100644
--- a/security/commoncap.c
+++ b/security/commoncap.c
@@ -820,6 +820,7 @@ int cap_bprm_set_creds(struct linux_binprm *bprm)
 	int ret;
 	kuid_t root_uid;
 
+	new->cap_ambient = old->cap_ambient;
 	if (WARN_ON(!cap_ambient_invariant_ok(old)))
 		return -EPERM;