CVE-2025-68733

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description A flaw exists in the Linux kernel's Smack security module where an unprivileged task, permitted to relabel itself, can create new labels by writing their names into its own /proc/PID/attr/smack/current file. This is possible because the do setattr() function imports the provided label before verifying the task's presence on the "relabel-self" list. The correction ensures the "relabel-self" list is checked before label import.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.