PT-2025-51652 · Linux+3 · Linux Kernel+3
CVE-2025-68239
·
Published
2025-11-05
·
Updated
2026-08-30
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw exists in the Linux kernel’s binfmt misc subsystem. Specifically, the
bm register write() function opens an executable file using open exec(), which restricts write access to prevent modification during execution. If an error occurs, the file is closed directly with filp close(), failing to restore write permissions. This can lead to subsequent write operations on the same file failing. The issue is addressed by calling exe file allow write access() before filp close() to properly restore write permissions.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Missing Release of Resource after Effective Lifetime
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Ubuntu