CVE-2025-68239

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-68239
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-68239.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-68239
Downstream
Related
Published
2025-12-16T14:21:16.889Z
Modified
2026-03-26T04:18:23.450982Z
Summary
binfmt_misc: restore write access before closing files opened by open_exec()
Details

In the Linux kernel, the following vulnerability has been resolved:

binfmtmisc: restore write access before closing files opened by openexec()

bmregisterwrite() opens an executable file using openexec(), which internally calls doopen_execat() and denies write access on the file to avoid modification while it is being executed.

However, when an error occurs, bmregisterwrite() closes the file using filp_close() directly. This does not restore the write permission, which may cause subsequent write operations on the same file to fail.

Fix this by calling exefileallowwriteaccess() before filp_close() to restore the write permission properly.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68239.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
e7850f4d844e0acfac7e570af611d89deade3146
Fixed
480ac88431703f2adbb8e6b5bd73c3f3cf9f3d7f
Fixed
fbab8c08e1a6dbaef81e22d672a7647553101d16
Fixed
6cce7bc7fac8471c832696720d9c8f2a976d9c54
Fixed
e785f552ab04dbca01d31f0334f4561240b04459
Fixed
90f601b497d76f40fa66795c3ecf625b6aced9fd
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
467a50d5db7deaf656e18a1f633be9ecd94b393a
Last affected
4a8b4124ea4156ca52918b66c750a69c6d932aa5
Last affected
3fe116e33a855bbfdd32dc207e9be2a41e3ed3a6
Last affected
c0e0ab60d0b15469e69db93215dad009999f5a5b
Last affected
5ab9464a2a3c538eedbb438f1802f2fd98d0953f
Last affected
d28492be82e19fc69cc69975fc2052b37ef0c821

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-68239.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.12.0
Fixed
6.1.167
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.130
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.78
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.17.9

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-68239.json"