Riskcovery

CVE-2025-71239

audit: add fchmodat2() to change attributes class

State
Published
Severity
Not scored
Published
Mar 17, 2026
Updated
May 11, 2026
Reserved
Feb 18, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

audit: add fchmodat2() to change attributes class

fchmodat2(), introduced in version 6.6 is currently not in the change attribute class of audit. Calling fchmodat2() to change a file attribute in the same fashion than chmod() or fchmodat() will bypass audit rules such as:

-w /tmp/test -p rwa -k test_rwa

The current patch adds fchmodat2() to the change attributes class.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 09da082b07bbae1c11d9560c8502800039aebcea to before 91e27bc79c3bca93c06bf5a471d47df9a35b3741Affected
  • 09da082b07bbae1c11d9560c8502800039aebcea to before 3e762a03713e8c25ca0108c075d662c897fc0623Affected
  • 09da082b07bbae1c11d9560c8502800039aebcea to before 4fed776ca86378da7dd743a7b648e20b025ba8efAffected
  • 09da082b07bbae1c11d9560c8502800039aebcea to before c4334c0d0e7d6f02ed93756fd4ba807e3d00c05fAffected
  • 09da082b07bbae1c11d9560c8502800039aebcea to before 4f493a6079b588cf1f04ce5ed6cdad45ab0d53dcAffected
LinuxLinux
  • 6.6Affected
  • before 6.6Not affected
  • 6.6.128 through 6.6.*Not affected
  • 6.12.75 through 6.12.*Not affected
  • 6.18.16 through 6.18.*Not affected
  • 6.19.6 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.