Riskcovery

CVE-2025-39926

genetlink: fix genl_bind() invoking bind() after -EPERM

State
Published
Severity
5.5 Medium
Published
Oct 1, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

genetlink: fix genl_bind() invoking bind() after -EPERM

Per family bind/unbind callbacks were introduced to allow families to track multicast group consumer presence, e.g. to start or stop producing events depending on listeners.

However, in genl_bind() the bind() callback was invoked even if capability checks failed and ret was set to -EPERM. This means that callbacks could run on behalf of unauthorized callers while the syscall still returned failure to user space.

Fix this by only invoking bind() after "if (ret) break;" check i.e. after permission checks have succeeded.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 3de21a8990d3c2cc507e9cc4ed00f36358d5b93e to before 98c9d884047a3051c203708914a874dece3cbe54Affected
  • 3de21a8990d3c2cc507e9cc4ed00f36358d5b93e to before 8858c1e9405906c09589d7c336f04058ea198207Affected
  • 3de21a8990d3c2cc507e9cc4ed00f36358d5b93e to before 1dbfb0363224f6da56f6655d596dc5097308d6f5Affected
LinuxLinux
  • 6.9Affected
  • before 6.9Not affected
  • 6.12.48 through 6.12.*Not affected
  • 6.16.8 through 6.16.*Not affected
  • 6.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.