CVE-2025-68239 — Missing Release of Resource after Effective Lifetime in Linux
Severity
6.2MEDIUM
No vectorEPSS
0.0%
top 89.74%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 16
Latest updateFeb 24
Description
In the Linux kernel, the following vulnerability has been resolved:
binfmt_misc: restore write access before closing files opened by open_exec()
bm_register_write() opens an executable file using open_exec(), which
internally calls do_open_execat() and denies write access on the file to
avoid modification while it is being executed.
However, when an error occurs, bm_register_write() closes the file using
filp_close() directly. This does not restore the write permission, which
may cause subseq…
Affected Packages10 packages
🔴Vulnerability Details
8📋Vendor Advisories
7Red Hat
▶