PT-2026-72939

CVE-2026-74487

·

Published

2026-08-15

·

Updated

2026-10-16

Description by

CVSS 3.1
10
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the binfmt misc module where registering an entry with the MISC FMT OPEN FILE flag uses the open exec() function to open the interpreter, which denies write access for the duration of the entry's existence. When the entry is removed, the interpreter file is closed via filp close(), but write access is not restored. This results in the inode's i writecount remaining permanently negative, causing subsequent attempts to open the interpreter for writing to fail with an ETXTBSY error until the inode is evicted from the inode cache. The flaw is located in the put binfmt handler() function.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Vendors
Affected products
Related identifiers
AZL-96344
OESA-2026-3707
OESA-2026-3708
OPENSUSE-SU-2026:22091-1
SUSE-SU-2026:24179-1
SUSE-SU-2026:24181-1
SUSE-SU-2026:24182-1
SUSE-SU-2026:24184-1
SUSE-SU-2026:24197-1
SUSE-SU-2026:24235-1
SUSE-SU-2026:24315-1
SUSE-SU-2026:24316-1
SUSE-SU-2026:4640-1
SUSE-SU-2026:4706-1
Found an issue in the description? Have something to add? Feel free to write us 👾