diff --git a/security/commoncap.c b/security/commoncap.c
index 045b5b80ea40be85d37f3d26a43dead708f413f4..77b04cb6feac70a03abc1e93df05540423d51336 100644
--- a/security/commoncap.c
+++ b/security/commoncap.c
@@ -812,6 +812,7 @@ int cap_bprm_repopulate_creds(struct linux_binprm *bprm)
 	int ret;
 	kuid_t root_uid;
 
+	new->cap_ambient = old->cap_ambient;
 	if (WARN_ON(!cap_ambient_invariant_ok(old)))
 		return -EPERM;