CVE-2025-68740: ima: Handle error code returned by ima_filter_rule_match()
ima: Handle error code returned by imafilterrulematch()
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
In the IMA code (ima_match_rules), change the check that currently reads 'if (!rc)' to 'if (rc <= 0)' so that negative error codes (e.g. -ENOENT) do not bypass the match test. Rebuild and deploy the updated kernel containing this source change.
Linux kernel (IMA) ima_match_rules(): error-check condition = change from 'if (!rc)' to 'if (rc <= 0)'
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68740?
CVE-2025-68740 has been rated as medium severity due to potential impacts on security policies within the Linux kernel.
How do I fix CVE-2025-68740?
To mitigate CVE-2025-68740, apply the latest patches provided by your Linux distribution that address the vulnerability in the kernel.
What type of vulnerability is CVE-2025-68740?
CVE-2025-68740 is related to improper error handling within the kernel's integrity measurement architecture.
Which systems are affected by CVE-2025-68740?
CVE-2025-68740 affects versions of the Linux kernel, specifically the Microsoft azl3 kernel 6.6.117.1-1 and other related kernel distributions.
Can CVE-2025-68740 be exploited remotely?
CVE-2025-68740 may lead to escalated privileges or system instability, but it is not inherently a remote code execution vulnerability.