Linux Kernel Vulnerability Affecting File Write Permissions by Vendor Linux

CVE-2025-68239

What is CVE-2025-68239?

A file handling vulnerability exists within the Linux kernel's binfmt_misc functionality, specifically in the bm_register_write() method. This flaw occurs when the system opens an executable file with open_exec(), which temporarily restricts write access to ensure the integrity of the file during execution. However, if an error is encountered, the existing mechanism fails to restore the write permissions before closing the file, leading to potential issues with subsequent write operations on that file. This vulnerability highlights the importance of proper permission management in file handling operations, particularly in contexts where executable files are involved.

References