CVE-2026-68186

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the binfmt misc module where the load misc binary() function incorrectly sets the have execfd flag before the interpreter is actually opened. If the interpreter open operation fails and returns -ENOEXEC, the flag remains set, causing the system to attempt to run the matched binary directly without a staged interpreter. This leads to a NULL pointer dereference in the begin new exec() function when it calls would dump(bprm, bprm->executable), as bprm->executable is NULL. Unprivileged users can trigger this by mounting binfmt misc in user namespaces and registering an entry with an interpreter on a FUSE mount that is configured to fail the open request.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.