CVE-2026-74486

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the binfmt misc module where load misc binary() clones a registered interpreter file for MISC FMT OPEN FILE entries and denies write access using deny write access(). The clone is assigned to bprm->interpreter and later released via exe file allow write access(). When pre-content watches are active, exe file allow write access() may skip the i writecount increment for files with FMODE FSNOTIFY HSM set. This discrepancy causes the interpreter inode's i writecount to decrease with each execution, potentially leaving the interpreter unwritable even after the entry and its users are removed. The fix involves using exe file deny write access() to ensure consistent file mode decisions and propagating failures with ETXTBSY when an interpreter is concurrently open for writing.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.