https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 13:55:05 +0000 https://vulnerability.circl.lu/vuln/cve-2026-68151 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>binfmt_elf_fdpic: only honour the first PT_INTERP</p> <p>The program header scan handles PT_INTERP from a switch nested in the scan loop, so its break leaves the switch and not the loop. A binary carrying more than one PT_INTERP runs the case again and overwrites both interpreter_name and interpreter. The previous name allocation leaks and so does the previous interpreter reference, along with the write denial open_exec() took on it. The denial is never released, so the file stays unwritable for as long as the system runs.</p> <p>An unprivileged caller reaches this with a crafted binary and repeats it at will. binfmt_elf stops at the first PT_INTERP. Do the same here.</p> <p>The flaw dates back to the driver&#39;s introduction in the pre-git history tree introduced in v2.6.11 by 91808d6ebe39 (&#34;[PATCH] FRV: Add FDPIC ELF binary format driver&#34;).</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>binfmt_elf_fdpic: only honour the first PT_INTERP</p> <p>The program header scan handles PT_INTERP from a switch nested in the scan loop, so its break leaves the switch and not the loop. A binary carrying more than one PT_INTERP runs the case again and overwrites both interpreter_name and interpreter. The previous name allocation leaks and so does the previous interpreter reference, along with the write denial open_exec() took on it. The denial is never released, so the file stays unwritable for as long as the system runs.</p> <p>An unprivileged caller reaches this with a crafted binary and repeats it at will. binfmt_elf stops at the first PT_INTERP. Do the same here.</p> <p>The flaw dates back to the driver&#39;s introduction in the pre-git history tree introduced in v2.6.11 by 91808d6ebe39 (&#34;[PATCH] FRV: Add FDPIC ELF binary format driver&#34;).</p> https://vulnerability.circl.lu/vuln/cve-2026-68151