CVE-2026-74485

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds read exists in the binfmt misc component of the Linux kernel. The issue occurs during the parsing of a registration string when a user-chosen delimiter is also one of the supported flag characters ('P', 'O', 'C', or 'F'). In the create entry() function, the buffer is padded with the delimiter to ensure termination. However, the check special flags() function consumes flag characters and only stops when it encounters a non-flag byte. If the delimiter is a flag character, the function reads past the end of the allocated buffer until a non-flag character is found. This condition can be triggered by unprivileged users within a user namespace, potentially leading to a system crash if the scan enters an unmapped page.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.