CVE-2025-71306

In the Linux kernel, the following vulnerability has been resolved: ima: Fix stack-out-of-bounds in isbprmcredsforexec KASAN reported a stack-out-of-bounds access in imaappraisemeasurement from isbprmcredsforexec: BUG: KASAN: stack-out-of-bounds in imaappraisemeasurement+0x12dc/0x16a0 Read of siz...

CVE-2025-71306

CVE-2025-71306 documents a stack-out-of-bounds access in the Linux kernel related to ima_appraise_measurement invoked from is_bprm_creds_for_exec. The bug arises from miscalculated offsets when using container_of on the file pointer, resulting in an out-of-bounds read on the stack. The fix adds a...