CVE-2025-68733
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: smack: fix bug: unprivileged task can create labels If an unprivileged task is allowed to relabel itself (/smack/relabel-self is not empty), it can freely create new labels by writing their names into own /proc/PID/attr/smack/current This occurs because do_setattr() imports the provided label in advance, before checking "relabel-self" list. This change ensures that the "relabel-self" list is checked before importing the label.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedDec 24, 2025
First seenDec 24, 2025
How to fix
Update
- Linux Linuxc80173233014a360c13fa5cc79d36bfe6e53a8ed, 6b1e45e13546c9ea0b1d99097993ac0aafae90b1, 4a7a7621619a366712fb9cefcb6e69f956c247ce, f8fd5491100f920847a3338d5fba22db19c72773, ac9fce2efabad37c338aac86fbe100f77a080e59, 64aa81250171b6bb6803e97ea7a5d73bfa061f6e, 60e8d49989410a7ade60f5dadfcd979c117d05c0, c147e13ea7fe9f118f8c9ba5e96cbd644b00d6b3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 38416e53936ecf896948fdeffc36b76979117952 ≤ v < c80173233014a360c13fa5cc79d36bfe6e53a8ed, 38416e53936ecf896948fdeffc36b76979117952 ≤ v < 6b1e45e13546c9ea0b1d99097993ac0aafae90b1, 38416e53936ecf896948fdeffc36b76979117952 ≤ v < 4a7a7621619a366712fb9cefcb6e69f956c247ce, 38416e53936ecf896948fdeffc36b76979117952 ≤ v < f8fd5491100f920847a3338d5fba22db19c72773, 38416e53936ecf896948fdeffc36b76979117952 ≤ v < ac9fce2efabad37c338aac86fbe100f77a080e59, 38416e53936ecf896948fdeffc36b76979117952 ≤ v < 64aa81250171b6bb6803e97ea7a5d73bfa061f6e, 38416e53936ecf896948fdeffc36b76979117952 ≤ v < 60e8d49989410a7ade60f5dadfcd979c117d05c0, 38416e53936ecf896948fdeffc36b76979117952 ≤ v < c147e13ea7fe9f118f8c9ba5e96cbd644b00d6b3, 4.4 | c80173233014a360c13fa5cc79d36bfe6e53a8ed, 6b1e45e13546c9ea0b1d99097993ac0aafae90b1, 4a7a7621619a366712fb9cefcb6e69f956c247ce, f8fd5491100f920847a3338d5fba22db19c72773, ac9fce2efabad37c338aac86fbe100f77a080e59, 64aa81250171b6bb6803e97ea7a5d73bfa061f6e, 60e8d49989410a7ade60f5dadfcd979c117d05c0, c147e13ea7fe9f118f8c9ba5e96cbd644b00d6b3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.