139 matches found
CVE-2026-74486: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: binfmtmisc: use exefiledenywriteaccess for the interpreter clone For MISCFMTOPENFILE entries loadmiscbinary clones the registered interpreter file and denies write access to the clone via plain denywriteaccess. The clone is...
CVE-2026-74486: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: binfmtmisc: use exefiledenywriteaccess for the interpreter clone For MISCFMTOPENFILE entries loadmiscbinary clones the registered interpreter file and denies write access to the clone via plain denywriteaccess. The clone is...
Linux Distros Unpatched Vulnerability : CVE-2026-74484
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - binfmtmisc: don't let an 'F' entry pin its own instance An entry registered with 'F' opens its interpreter at registration time and holds that file until the...
PT-2026-72936
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A denial of service DoS issue exists in the binfmt misc module. An entry registered with the 'F' flag opens its interpreter at registration and retains the file until the entry is freed...
PT-2026-72938
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the binfmt misc module where load misc binary clones a registered interpreter file for MISC FMT OPEN FILE entries and denies write access using deny write access. The...
Linux Distros Unpatched Vulnerability : CVE-2026-74486
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - binfmtmisc: use exefiledenywriteaccess for the interpreter clone For MISCFMTOPENFILE entries loadmiscbinary clones the registered interpreter file and denies...
Linux Distros Unpatched Vulnerability : CVE-2026-74483
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - binfmtmisc: don't leak the user namespace when the mount fails bmgettree takes a reference to the user namespace and hands it to gettreekeyed as the sget key...
Linux Distros Unpatched Vulnerability : CVE-2026-74485
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - binfmtmisc: reject a flag character as the field delimiter The registration string starts with a user chosen delimiter that separates the individual fields. So...
CVE-2026-74485: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: binfmtmisc: reject a flag character as the field delimiter The registration string starts with a user chosen delimiter that separates the individual fields. So that the field parsers terminate even on a truncated string createent...
CVE-2026-74487: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: binfmtmisc: restore write access when removing an entry Registering an entry with the MISCFMTOPENFILE flag opens the interpreter via openexec which denies write access to it for as long as the entry exists. Removing the entry...
Linux Distros Unpatched Vulnerability : CVE-2026-74487
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - binfmtmisc: restore write access when removing an entry Registering an entry with the MISCFMTOPENFILE flag opens the interpreter via openexec which denies write...
CVE-2026-74487: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: binfmtmisc: restore write access when removing an entry Registering an entry with the MISCFMTOPENFILE flag opens the interpreter via openexec which denies write access to it for as long as the entry exists. Removing the entry...
PT-2026-72937
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the binfmt misc component of the Linux kernel. The issue occurs during the parsing of a registration string when a user-chosen delimiter is also one of th...
PT-2026-72939
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the binfmt misc module where registering an entry with the MISC FMT OPEN FILE flag uses the open exec function to open the interpreter, which denies write access for t...
SUSE CVE-2026-68186
In the Linux kernel, the following vulnerability has been resolved: binfmtmisc: set haveexecfd only once the interpreter is opened loadmiscbinary raises bprm-haveexecfd as soon as it sees the 'O' or 'C' flag. This happens well before it opens the interpreter. If that open fails the flag stays set...
CVE-2026-68186
A flaw was found in the binfmtmisc component of the Linux kernel. An unprivileged user can exploit this by registering a binfmtmisc entry with a specially crafted interpreter path on a FUSE Filesystem in Userspace mount. If the interpreter open fails, it can lead to a NULL pointer dereference whe...
binfmt_misc: set have_execfd only once the interpreter is opened
...
CVE-2026-68186
In the Linux kernel, the following vulnerability has been resolved: binfmtmisc: set haveexecfd only once the interpreter is opened loadmiscbinary raises bprm-haveexecfd as soon as it sees the 'O' or 'C' flag. This happens well before it opens the interpreter. If that open fails the flag stays set...
DEBIAN-CVE-2026-68186
In the Linux kernel, the following vulnerability has been resolved: binfmtmisc: set haveexecfd only once the interpreter is opened loadmiscbinary raises bprm-haveexecfd as soon as it sees the 'O' or 'C' flag. This happens well before it opens the interpreter. If that open fails the flag stays set...
UBUNTU-CVE-2026-68186
In the Linux kernel, the following vulnerability has been resolved: binfmtmisc: set haveexecfd only once the interpreter is opened loadmiscbinary raises bprm-haveexecfd as soon as it sees the 'O' or 'C' flag. This happens well before it opens the interpreter. If that open fails the flag stays set...