CVE-2026-74485 binfmt_misc: reject a flag character as the field delimiter

🗓️ 15 Aug 2026 12:27:16Reported by LinuxType

binfmt_misc in Linux kernel reads out of bounds when flag character is used as field delimiter by unprivileged users.

Reporter	Title	Published	Views	Family All 7
ATTACKERKB	CVE-2026-74485	15 Aug 202612:27	–	attackerkb
CVE	CVE-2026-74485	15 Aug 202600:00	–	cve
Debian CVE	CVE-2026-74485	15 Aug 202600:00	–	debiancve
EUVD	EUVD-2026-59678	15 Aug 202612:27	–	euvd
NVD	CVE-2026-74485	15 Aug 202613:17	–	nvd
OSV	DEBIAN-CVE-2026-74485	15 Aug 202613:17	–	osv
Positive Technologies	PT-2026-72937	15 Aug 202600:00	–	ptsecurity

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "fs/binfmt_misc.c"
    ],
    "versions": [
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "1819f82dee766c58295ecaacdac02cdf6837d7a4",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "1853e95c9bfe69ef1dd862b3f551e68f4a1b76cc",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "840bb9c49c3e75fb32b593d67ab32f6b77122262",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "9a2d87db3898b5993b64fd258d0334e0eba9ee0d",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2",
        "lessThan": "8e85d50ba1117fd446bf9a250bd8a97d48384bdc",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "fs/binfmt_misc.c"
    ],
    "versions": [
      {
        "version": "2.6.12",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "2.6.12",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.151",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.103",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.44",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.1.8",
        "lessThanOrEqual": "7.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.2-rc6",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/1853e95c9bfe69ef1dd862b3f551e68f4a1b76cc
git	www.git.kernel.org/stable/c/840bb9c49c3e75fb32b593d67ab32f6b77122262
git	www.git.kernel.org/stable/c/9a2d87db3898b5993b64fd258d0334e0eba9ee0d
git	www.git.kernel.org/stable/c/1819f82dee766c58295ecaacdac02cdf6837d7a4
git	www.git.kernel.org/stable/c/8e85d50ba1117fd446bf9a250bd8a97d48384bdc

15 Aug 2026 12:27Current