CVE-2025-68239
Description
In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: restore write access before closing files opened by open_exec() bm_register_write() opens an executable file using open_exec(), which internally calls do_open_execat() and denies write access on the file to avoid modification while it is being executed. However, when an error occurs, bm_register_write() closes the file using filp_close() directly. This does not restore the write permission, which may cause subsequent write operations on the same file to fail. Fix this by calling exe_file_allow_write_access() before filp_close() to restore the write permission properly.
How to fix
- Linux Linux54274ff90488b6c0f595a6518faed3cf0bc966eb, 480ac88431703f2adbb8e6b5bd73c3f3cf9f3d7f, fbab8c08e1a6dbaef81e22d672a7647553101d16, 6cce7bc7fac8471c832696720d9c8f2a976d9c54, e785f552ab04dbca01d31f0334f4561240b04459, 90f601b497d76f40fa66795c3ecf625b6aced9fd, 4.10, 4.15, 4.20, 5.5, 5.11, 5.12 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | e7850f4d844e0acfac7e570af611d89deade3146 ≤ v < 54274ff90488b6c0f595a6518faed3cf0bc966eb, e7850f4d844e0acfac7e570af611d89deade3146 ≤ v < 480ac88431703f2adbb8e6b5bd73c3f3cf9f3d7f, e7850f4d844e0acfac7e570af611d89deade3146 ≤ v < fbab8c08e1a6dbaef81e22d672a7647553101d16, e7850f4d844e0acfac7e570af611d89deade3146 ≤ v < 6cce7bc7fac8471c832696720d9c8f2a976d9c54, e7850f4d844e0acfac7e570af611d89deade3146 ≤ v < e785f552ab04dbca01d31f0334f4561240b04459, e7850f4d844e0acfac7e570af611d89deade3146 ≤ v < 90f601b497d76f40fa66795c3ecf625b6aced9fd, 467a50d5db7deaf656e18a1f633be9ecd94b393a, 4a8b4124ea4156ca52918b66c750a69c6d932aa5, 3fe116e33a855bbfdd32dc207e9be2a41e3ed3a6, c0e0ab60d0b15469e69db93215dad009999f5a5b, 5ab9464a2a3c538eedbb438f1802f2fd98d0953f, d28492be82e19fc69cc69975fc2052b37ef0c821, 4.9.262 ≤ v < 4.10, 4.14.226 ≤ v < 4.15, 4.19.181 ≤ v < 4.20, 5.4.106 ≤ v < 5.5, 5.10.24 ≤ v < 5.11, 5.11.7 ≤ v < 5.12, 5.12 | 54274ff90488b6c0f595a6518faed3cf0bc966eb, 480ac88431703f2adbb8e6b5bd73c3f3cf9f3d7f, fbab8c08e1a6dbaef81e22d672a7647553101d16, 6cce7bc7fac8471c832696720d9c8f2a976d9c54, e785f552ab04dbca01d31f0334f4561240b04459, 90f601b497d76f40fa66795c3ecf625b6aced9fd, 4.10, 4.15, 4.20, 5.5, 5.11, 5.12 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.