Vulnerability-Lookup

CVE-2025-68239 (GCVE-0-2025-68239)

Vulnerability from cvelistv5 – Published: 2025-12-16 14:21 – Updated: 2026-06-01 16:05

Title

binfmt_misc: restore write access before closing files opened by open_exec()

Summary

In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: restore write access before closing files opened by open_exec() bm_register_write() opens an executable file using open_exec(), which internally calls do_open_execat() and denies write access on the file to avoid modification while it is being executed. However, when an error occurs, bm_register_write() closes the file using filp_close() directly. This does not restore the write permission, which may cause subsequent write operations on the same file to fail. Fix this by calling exe_file_allow_write_access() before filp_close() to restore the write permission properly.

Severity

No CVSS data available.

Assigner

Linux mitre root

References

6 references

URL	Tags
https://git.kernel.org/stable/c/54274ff90488b6c0f…
https://git.kernel.org/stable/c/480ac88431703f2ad…
https://git.kernel.org/stable/c/fbab8c08e1a6dbaef…
https://git.kernel.org/stable/c/6cce7bc7fac8471c8…
https://git.kernel.org/stable/c/e785f552ab04dbca0…
https://git.kernel.org/stable/c/90f601b497d76f40f…

Impacted products

2 products

Vendor	Product	Version	CPE status
Linux	Linux	Affected: e7850f4d844e0acfac7e570af611d89deade3146 , < 54274ff90488b6c0f595a6518faed3cf0bc966eb (git) Affected: e7850f4d844e0acfac7e570af611d89deade3146 , < 480ac88431703f2adbb8e6b5bd73c3f3cf9f3d7f (git) Affected: e7850f4d844e0acfac7e570af611d89deade3146 , < fbab8c08e1a6dbaef81e22d672a7647553101d16 (git) Affected: e7850f4d844e0acfac7e570af611d89deade3146 , < 6cce7bc7fac8471c832696720d9c8f2a976d9c54 (git) Affected: e7850f4d844e0acfac7e570af611d89deade3146 , < e785f552ab04dbca01d31f0334f4561240b04459 (git) Affected: e7850f4d844e0acfac7e570af611d89deade3146 , < 90f601b497d76f40fa66795c3ecf625b6aced9fd (git) Affected: 467a50d5db7deaf656e18a1f633be9ecd94b393a (git) Affected: 4a8b4124ea4156ca52918b66c750a69c6d932aa5 (git) Affected: 3fe116e33a855bbfdd32dc207e9be2a41e3ed3a6 (git) Affected: c0e0ab60d0b15469e69db93215dad009999f5a5b (git) Affected: 5ab9464a2a3c538eedbb438f1802f2fd98d0953f (git) Affected: d28492be82e19fc69cc69975fc2052b37ef0c821 (git) Affected: 4.9.262 , < 4.10 (semver) Affected: 4.14.226 , < 4.15 (semver) Affected: 4.19.181 , < 4.20 (semver) Affected: 5.4.106 , < 5.5 (semver) Affected: 5.10.24 , < 5.11 (semver) Affected: 5.11.7 , < 5.12 (semver)	guessed
Linux	Linux	Affected: 5.12 Unaffected: 0 , < 5.12 (semver) Unaffected: 5.15.209 , ≤ 5.15.* (semver) Unaffected: 6.1.167 , ≤ 6.1.* (semver) Unaffected: 6.6.130 , ≤ 6.6.* (semver) Unaffected: 6.12.78 , ≤ 6.12.* (semver) Unaffected: 6.17.9 , ≤ 6.17.* (semver) Unaffected: 6.18 , ≤ * (original_commit_for_fix)	guessed

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "fs/binfmt_misc.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "54274ff90488b6c0f595a6518faed3cf0bc966eb",
              "status": "affected",
              "version": "e7850f4d844e0acfac7e570af611d89deade3146",
              "versionType": "git"
            },
            {
              "lessThan": "480ac88431703f2adbb8e6b5bd73c3f3cf9f3d7f",
              "status": "affected",
              "version": "e7850f4d844e0acfac7e570af611d89deade3146",
              "versionType": "git"
            },
            {
              "lessThan": "fbab8c08e1a6dbaef81e22d672a7647553101d16",
              "status": "affected",
              "version": "e7850f4d844e0acfac7e570af611d89deade3146",
              "versionType": "git"
            },
            {
              "lessThan": "6cce7bc7fac8471c832696720d9c8f2a976d9c54",
              "status": "affected",
              "version": "e7850f4d844e0acfac7e570af611d89deade3146",
              "versionType": "git"
            },
            {
              "lessThan": "e785f552ab04dbca01d31f0334f4561240b04459",
              "status": "affected",
              "version": "e7850f4d844e0acfac7e570af611d89deade3146",
              "versionType": "git"
            },
            {
              "lessThan": "90f601b497d76f40fa66795c3ecf625b6aced9fd",
              "status": "affected",
              "version": "e7850f4d844e0acfac7e570af611d89deade3146",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "467a50d5db7deaf656e18a1f633be9ecd94b393a",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "4a8b4124ea4156ca52918b66c750a69c6d932aa5",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "3fe116e33a855bbfdd32dc207e9be2a41e3ed3a6",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "c0e0ab60d0b15469e69db93215dad009999f5a5b",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "5ab9464a2a3c538eedbb438f1802f2fd98d0953f",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "d28492be82e19fc69cc69975fc2052b37ef0c821",
              "versionType": "git"
            },
            {
              "lessThan": "4.10",
              "status": "affected",
              "version": "4.9.262",
              "versionType": "semver"
            },
            {
              "lessThan": "4.15",
              "status": "affected",
              "version": "4.14.226",
              "versionType": "semver"
            },
            {
              "lessThan": "4.20",
              "status": "affected",
              "version": "4.19.181",
              "versionType": "semver"
            },
            {
              "lessThan": "5.5",
              "status": "affected",
              "version": "5.4.106",
              "versionType": "semver"
            },
            {
              "lessThan": "5.11",
              "status": "affected",
              "version": "5.10.24",
              "versionType": "semver"
            },
            {
              "lessThan": "5.12",
              "status": "affected",
              "version": "5.11.7",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "fs/binfmt_misc.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.12"
            },
            {
              "lessThan": "5.12",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.209",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.167",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.130",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.78",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.17.*",
              "status": "unaffected",
              "version": "6.17.9",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.18",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.209",
                  "versionStartIncluding": "5.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.167",
                  "versionStartIncluding": "5.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.130",
                  "versionStartIncluding": "5.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.78",
                  "versionStartIncluding": "5.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.17.9",
                  "versionStartIncluding": "5.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18",
                  "versionStartIncluding": "5.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.9.262",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.14.226",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.19.181",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "5.4.106",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "5.10.24",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "5.11.7",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbinfmt_misc: restore write access before closing files opened by open_exec()\n\nbm_register_write() opens an executable file using open_exec(), which\ninternally calls do_open_execat() and denies write access on the file to\navoid modification while it is being executed.\n\nHowever, when an error occurs, bm_register_write() closes the file using\nfilp_close() directly. This does not restore the write permission, which\nmay cause subsequent write operations on the same file to fail.\n\nFix this by calling exe_file_allow_write_access() before filp_close() to\nrestore the write permission properly."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-01T16:05:41.063Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/54274ff90488b6c0f595a6518faed3cf0bc966eb"
        },
        {
          "url": "https://git.kernel.org/stable/c/480ac88431703f2adbb8e6b5bd73c3f3cf9f3d7f"
        },
        {
          "url": "https://git.kernel.org/stable/c/fbab8c08e1a6dbaef81e22d672a7647553101d16"
        },
        {
          "url": "https://git.kernel.org/stable/c/6cce7bc7fac8471c832696720d9c8f2a976d9c54"
        },
        {
          "url": "https://git.kernel.org/stable/c/e785f552ab04dbca01d31f0334f4561240b04459"
        },
        {
          "url": "https://git.kernel.org/stable/c/90f601b497d76f40fa66795c3ecf625b6aced9fd"
        }
      ],
      "title": "binfmt_misc: restore write access before closing files opened by open_exec()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2025-68239",
    "datePublished": "2025-12-16T14:21:16.889Z",
    "dateReserved": "2025-12-16T13:41:40.263Z",
    "dateUpdated": "2026-06-01T16:05:41.063Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2025-68239",
      "date": "2026-09-15",
      "epss": "0.00197",
      "percentile": "0.09601"
    },
    "microsoft_vex": {
      "current_release_date": "2026-03-27T14:36:16.000Z",
      "cve": "CVE-2025-68239",
      "id": "msrc_CVE-2025-68239",
      "initial_release_date": "2025-12-02T00:00:00.000Z",
      "product_status:fixed": "1",
      "product_status:known_affected": "5",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "binfmt_misc: restore write access before closing files opened by open_exec()",
      "url": "https://msrc.microsoft.com/csaf/vex/2025/msrc_cve-2025-68239.json",
      "version": "6"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-68239\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-12-16T15:15:53.063\",\"lastModified\":\"2026-06-17T09:58:47.200\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nbinfmt_misc: restore write access before closing files opened by open_exec()\\n\\nbm_register_write() opens an executable file using open_exec(), which\\ninternally calls do_open_execat() and denies write access on the file to\\navoid modification while it is being executed.\\n\\nHowever, when an error occurs, bm_register_write() closes the file using\\nfilp_close() directly. This does not restore the write permission, which\\nmay cause subsequent write operations on the same file to fail.\\n\\nFix this by calling exe_file_allow_write_access() before filp_close() to\\nrestore the write permission properly.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"fs/binfmt_misc.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"e7850f4d844e0acfac7e570af611d89deade3146\",\"lessThan\":\"54274ff90488b6c0f595a6518faed3cf0bc966eb\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"e7850f4d844e0acfac7e570af611d89deade3146\",\"lessThan\":\"480ac88431703f2adbb8e6b5bd73c3f3cf9f3d7f\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"e7850f4d844e0acfac7e570af611d89deade3146\",\"lessThan\":\"fbab8c08e1a6dbaef81e22d672a7647553101d16\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"e7850f4d844e0acfac7e570af611d89deade3146\",\"lessThan\":\"6cce7bc7fac8471c832696720d9c8f2a976d9c54\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"e7850f4d844e0acfac7e570af611d89deade3146\",\"lessThan\":\"e785f552ab04dbca01d31f0334f4561240b04459\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"e7850f4d844e0acfac7e570af611d89deade3146\",\"lessThan\":\"90f601b497d76f40fa66795c3ecf625b6aced9fd\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"467a50d5db7deaf656e18a1f633be9ecd94b393a\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"4a8b4124ea4156ca52918b66c750a69c6d932aa5\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"3fe116e33a855bbfdd32dc207e9be2a41e3ed3a6\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"c0e0ab60d0b15469e69db93215dad009999f5a5b\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"5ab9464a2a3c538eedbb438f1802f2fd98d0953f\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"d28492be82e19fc69cc69975fc2052b37ef0c821\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"4.9.262\",\"lessThan\":\"4.10\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"4.14.226\",\"lessThan\":\"4.15\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"4.19.181\",\"lessThan\":\"4.20\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"5.4.106\",\"lessThan\":\"5.5\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"5.10.24\",\"lessThan\":\"5.11\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"5.11.7\",\"lessThan\":\"5.12\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"fs/binfmt_misc.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"5.12\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"5.12\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.209\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.167\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.130\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.78\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.17.9\",\"lessThanOrEqual\":\"6.17.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{},\"references\":[{\"url\":\"https://git.kernel.org/stable/c/480ac88431703f2adbb8e6b5bd73c3f3cf9f3d7f\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/54274ff90488b6c0f595a6518faed3cf0bc966eb\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/6cce7bc7fac8471c832696720d9c8f2a976d9c54\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/90f601b497d76f40fa66795c3ecf625b6aced9fd\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/e785f552ab04dbca01d31f0334f4561240b04459\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/fbab8c08e1a6dbaef81e22d672a7647553101d16\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-07-08T12:23:19+00:00",
      "cve": "CVE-2025-68239",
      "id": "CVE-2025-68239",
      "initial_release_date": "2025-12-16T00:00:00+00:00",
      "product_status:known_affected": "198",
      "product_status:known_not_affected": "76",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: binfmt_misc: restore write access before closing files opened by open_exec()",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-68239.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-08-30T01:43:19Z",
      "cve": "CVE-2025-68239",
      "id": "CVE-2025-68239",
      "initial_release_date": "2025-12-17T00:24:41Z",
      "product_status:first_fixed": "2",
      "product_status:known_affected": "683",
      "product_status:known_not_affected": "187",
      "product_status:recommended": "289",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2025-68239",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2025-68239.json",
      "version": "37"
    }
  }
}

FKIE_CVE-2025-68239

Vulnerability from fkie_nvd - Published: 2025-12-16 15:15 - Updated: 2026-06-17 09:58

Severity

Summary

References

	URL	Tags
	416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/480ac88431703f2adbb8e6b5bd73c3f3cf9f3d7f
	416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/54274ff90488b6c0f595a6518faed3cf0bc966eb
	416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/6cce7bc7fac8471c832696720d9c8f2a976d9c54
	416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/90f601b497d76f40fa66795c3ecf625b6aced9fd
	416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/e785f552ab04dbca01d31f0334f4561240b04459
	416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/fbab8c08e1a6dbaef81e22d672a7647553101d16

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "fs/binfmt_misc.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "54274ff90488b6c0f595a6518faed3cf0bc966eb",
              "status": "affected",
              "version": "e7850f4d844e0acfac7e570af611d89deade3146",
              "versionType": "git"
            },
            {
              "lessThan": "480ac88431703f2adbb8e6b5bd73c3f3cf9f3d7f",
              "status": "affected",
              "version": "e7850f4d844e0acfac7e570af611d89deade3146",
              "versionType": "git"
            },
            {
              "lessThan": "fbab8c08e1a6dbaef81e22d672a7647553101d16",
              "status": "affected",
              "version": "e7850f4d844e0acfac7e570af611d89deade3146",
              "versionType": "git"
            },
            {
              "lessThan": "6cce7bc7fac8471c832696720d9c8f2a976d9c54",
              "status": "affected",
              "version": "e7850f4d844e0acfac7e570af611d89deade3146",
              "versionType": "git"
            },
            {
              "lessThan": "e785f552ab04dbca01d31f0334f4561240b04459",
              "status": "affected",
              "version": "e7850f4d844e0acfac7e570af611d89deade3146",
              "versionType": "git"
            },
            {
              "lessThan": "90f601b497d76f40fa66795c3ecf625b6aced9fd",
              "status": "affected",
              "version": "e7850f4d844e0acfac7e570af611d89deade3146",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "467a50d5db7deaf656e18a1f633be9ecd94b393a",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "4a8b4124ea4156ca52918b66c750a69c6d932aa5",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "3fe116e33a855bbfdd32dc207e9be2a41e3ed3a6",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "c0e0ab60d0b15469e69db93215dad009999f5a5b",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "5ab9464a2a3c538eedbb438f1802f2fd98d0953f",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "d28492be82e19fc69cc69975fc2052b37ef0c821",
              "versionType": "git"
            },
            {
              "lessThan": "4.10",
              "status": "affected",
              "version": "4.9.262",
              "versionType": "semver"
            },
            {
              "lessThan": "4.15",
              "status": "affected",
              "version": "4.14.226",
              "versionType": "semver"
            },
            {
              "lessThan": "4.20",
              "status": "affected",
              "version": "4.19.181",
              "versionType": "semver"
            },
            {
              "lessThan": "5.5",
              "status": "affected",
              "version": "5.4.106",
              "versionType": "semver"
            },
            {
              "lessThan": "5.11",
              "status": "affected",
              "version": "5.10.24",
              "versionType": "semver"
            },
            {
              "lessThan": "5.12",
              "status": "affected",
              "version": "5.11.7",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "fs/binfmt_misc.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.12"
            },
            {
              "lessThan": "5.12",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.209",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.167",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.130",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.78",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.17.*",
              "status": "unaffected",
              "version": "6.17.9",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.18",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbinfmt_misc: restore write access before closing files opened by open_exec()\n\nbm_register_write() opens an executable file using open_exec(), which\ninternally calls do_open_execat() and denies write access on the file to\navoid modification while it is being executed.\n\nHowever, when an error occurs, bm_register_write() closes the file using\nfilp_close() directly. This does not restore the write permission, which\nmay cause subsequent write operations on the same file to fail.\n\nFix this by calling exe_file_allow_write_access() before filp_close() to\nrestore the write permission properly."
    }
  ],
  "id": "CVE-2025-68239",
  "lastModified": "2026-06-17T09:58:47.200",
  "metrics": {},
  "published": "2025-12-16T15:15:53.063",
  "references": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/480ac88431703f2adbb8e6b5bd73c3f3cf9f3d7f"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/54274ff90488b6c0f595a6518faed3cf0bc966eb"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/6cce7bc7fac8471c832696720d9c8f2a976d9c54"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/90f601b497d76f40fa66795c3ecf625b6aced9fd"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/e785f552ab04dbca01d31f0334f4561240b04459"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/fbab8c08e1a6dbaef81e22d672a7647553101d16"
    }
  ],
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "vulnStatus": "Deferred"
}

GHSA-6286-QQ46-83P9

Vulnerability from github – Published: 2025-12-16 15:30 – Updated: 2026-06-01 18:31

Details

In the Linux kernel, the following vulnerability has been resolved:

binfmt_misc: restore write access before closing files opened by open_exec()

bm_register_write() opens an executable file using open_exec(), which internally calls do_open_execat() and denies write access on the file to avoid modification while it is being executed.

However, when an error occurs, bm_register_write() closes the file using filp_close() directly. This does not restore the write permission, which may cause subsequent write operations on the same file to fail.

Fix this by calling exe_file_allow_write_access() before filp_close() to restore the write permission properly.

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2025-68239"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-12-16T15:15:53Z",
    "severity": null
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nbinfmt_misc: restore write access before closing files opened by open_exec()\n\nbm_register_write() opens an executable file using open_exec(), which\ninternally calls do_open_execat() and denies write access on the file to\navoid modification while it is being executed.\n\nHowever, when an error occurs, bm_register_write() closes the file using\nfilp_close() directly. This does not restore the write permission, which\nmay cause subsequent write operations on the same file to fail.\n\nFix this by calling exe_file_allow_write_access() before filp_close() to\nrestore the write permission properly.",
  "id": "GHSA-6286-qq46-83p9",
  "modified": "2026-06-01T18:31:21Z",
  "published": "2025-12-16T15:30:46Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68239"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/480ac88431703f2adbb8e6b5bd73c3f3cf9f3d7f"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/54274ff90488b6c0f595a6518faed3cf0bc966eb"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/6cce7bc7fac8471c832696720d9c8f2a976d9c54"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/90f601b497d76f40fa66795c3ecf625b6aced9fd"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/e785f552ab04dbca01d31f0334f4561240b04459"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/fbab8c08e1a6dbaef81e22d672a7647553101d16"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

MSRC_CVE-2025-68239

Vulnerability from csaf_microsoft - Published: 2025-12-02 00:00 - Updated: 2026-03-27 14:36

Summary

binfmt_misc: restore write access before closing files opened by open_exec()

Scope

1 vulnerability in this advisory, including CVE-2025-68239.

CVE-2025-68239

Fixed: 1 product Known affected: 5 products

https://learn.microsoft.com/en-us/azure/azure-linux/tutoria…

Open the full advisory

OPENSUSE-SU-2026:20145-1

Vulnerability from csaf_opensuse - Published: 2026-02-02 11:54 - Updated: 2026-02-02 11:54

Summary

Security update for the Linux Kernel

Severity

Important

Scope

215 vulnerabilities in this advisory, including CVE-2025-68239.

CVE-2025-68239

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Recommended: 136 products

Open the full advisory

SUSE-SU-2026:0278-1

Vulnerability from csaf_suse - Published: 2026-01-23 15:08 - Updated: 2026-01-23 15:08

Summary

Security update for the Linux Kernel

Severity

Important

Scope

395 vulnerabilities in this advisory, including CVE-2025-68239.

CVE-2025-68239

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Recommended: 10 products

Open the full advisory

SUSE-SU-2026:0281-1

Vulnerability from csaf_suse - Published: 2026-01-23 16:03 - Updated: 2026-01-23 16:03

Summary

Security update for the Linux Kernel

Severity

Important

Scope

395 vulnerabilities in this advisory, including CVE-2025-68239.

CVE-2025-68239

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Recommended: 8 products

Open the full advisory

SUSE-SU-2026:0315-1

Vulnerability from csaf_suse - Published: 2026-01-28 14:34 - Updated: 2026-01-28 14:34

Summary

Security update for the Linux Kernel

Severity

Important

Scope

395 vulnerabilities in this advisory, including CVE-2025-68239.

CVE-2025-68239

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Recommended: 56 products

Open the full advisory

SUSE-SU-2026:20207-1

Vulnerability from csaf_suse - Published: 2026-02-02 10:12 - Updated: 2026-02-02 10:12

Summary

Security update for the Linux Kernel

Severity

Important

Scope

215 vulnerabilities in this advisory, including CVE-2025-68239.

CVE-2025-68239

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Recommended: 28 products

Open the full advisory

SUSE-SU-2026:20220-1

Vulnerability from csaf_suse - Published: 2026-02-02 10:12 - Updated: 2026-02-02 10:12

Summary

Security update for the Linux Kernel

Severity

Important

Scope

215 vulnerabilities in this advisory, including CVE-2025-68239.

CVE-2025-68239

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Recommended: 114 products

Open the full advisory

SUSE-SU-2026:20228-1

Vulnerability from csaf_suse - Published: 2026-02-02 09:27 - Updated: 2026-02-02 09:27

Summary

Security update for the Linux Kernel

Severity

Important

Scope

215 vulnerabilities in this advisory, including CVE-2025-68239.

CVE-2025-68239

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Recommended: 9 products

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

CVE-2025-68239 (GCVE-0-2025-68239)

Tags

Sightings

Nomenclature