CVE-2025-68239: binfmt_misc: restore write access before closing files opened by open_exec()
binfmtmisc: restore write access before closing files opened by openexec()
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1 - Compensating control
In binfmt_misc, update bm_register_write() to call exe_file_allow_write_access() before filp_close() whenever closing a file opened by open_exec(), including the error path, so write permission is restored properly.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68239?
CVE-2025-68239 is classified as a medium severity vulnerability affecting the Linux kernel.
How do I fix CVE-2025-68239?
To fix CVE-2025-68239, update your Linux kernel to the latest stable version where the vulnerability has been resolved.
What types of systems are affected by CVE-2025-68239?
CVE-2025-68239 affects systems running Linux kernel versions that utilize the binfmt_misc feature.
What is the impact of CVE-2025-68239?
The impact of CVE-2025-68239 could allow unauthorized write access to files opened by open_exec(), leading to potential exploitation.
When was CVE-2025-68239 disclosed?
CVE-2025-68239 was disclosed as part of a series of updates to the Linux kernel addressing multiple vulnerabilities.