CVE-2026-68151

Name of the Vulnerable Software and Affected Versions Linux kernel versions 2.6.11 through 6.x

Description An issue exists in the binfmt elf fdpic driver where the program header scan incorrectly handles multiple PT INTERP entries. Because the break statement only exits a nested switch and not the main scan loop, a crafted binary containing more than one PT INTERP causes the system to overwrite the interpreter name and interpreter variables. This leads to memory leaks of the previous name allocation and interpreter reference. Additionally, the write denial established by the open exec() function is never released, rendering the file unwritable for the duration of the system runtime. An unprivileged user can trigger this condition repeatedly using a specially crafted binary.

Recommendations Update the Linux kernel to a version where the binfmt elf fdpic driver is patched to only honor the first PT INTERP entry.