Riskcovery

CVE-2025-68239

binfmt_misc: restore write access before closing files opened by open_exec()

State
Published
Severity
Not scored
Published
Dec 16, 2025
Updated
Oct 15, 2026
Reserved
Dec 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

binfmt_misc: restore write access before closing files opened by open_exec()

bm_register_write() opens an executable file using open_exec(), which internally calls do_open_execat() and denies write access on the file to avoid modification while it is being executed.

However, when an error occurs, bm_register_write() closes the file using filp_close() directly. This does not restore the write permission, which may cause subsequent write operations on the same file to fail.

Fix this by calling exe_file_allow_write_access() before filp_close() to restore the write permission properly.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • e7850f4d844e0acfac7e570af611d89deade3146 to before 54274ff90488b6c0f595a6518faed3cf0bc966ebAffected
  • e7850f4d844e0acfac7e570af611d89deade3146 to before 480ac88431703f2adbb8e6b5bd73c3f3cf9f3d7fAffected
  • e7850f4d844e0acfac7e570af611d89deade3146 to before fbab8c08e1a6dbaef81e22d672a7647553101d16Affected
  • e7850f4d844e0acfac7e570af611d89deade3146 to before 6cce7bc7fac8471c832696720d9c8f2a976d9c54Affected
  • e7850f4d844e0acfac7e570af611d89deade3146 to before e785f552ab04dbca01d31f0334f4561240b04459Affected
  • e7850f4d844e0acfac7e570af611d89deade3146 to before 90f601b497d76f40fa66795c3ecf625b6aced9fdAffected
  • 467a50d5db7deaf656e18a1f633be9ecd94b393aAffected
  • 4a8b4124ea4156ca52918b66c750a69c6d932aa5Affected
  • 3fe116e33a855bbfdd32dc207e9be2a41e3ed3a6Affected
  • c0e0ab60d0b15469e69db93215dad009999f5a5bAffected
  • 5ab9464a2a3c538eedbb438f1802f2fd98d0953fAffected
  • d28492be82e19fc69cc69975fc2052b37ef0c821Affected
  • 4.9.262 to before 4.10Affected
  • 4.14.226 to before 4.15Affected
  • 4.19.181 to before 4.20Affected
  • 5.4.106 to before 5.5Affected
  • 5.10.24 to before 5.11Affected
  • 5.11.7 to before 5.12Affected
LinuxLinux
  • 5.12Affected
  • before 5.12Not affected
  • 5.15.209 through 5.15.*Not affected
  • 6.1.167 through 6.1.*Not affected
  • 6.6.130 through 6.6.*Not affected
  • 6.12.78 through 6.12.*Not affected
  • 6.17.9 through 6.17.*Not affected
  • 6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.