CVE-2025-71306

kernel: ima: Fix stack-out-of-bounds in is_bprm_creds_for_exec()

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 27, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's Integrity Measurement Architecture (IMA) subsystem. This vulnerability involves a stack-out-of-bounds access within the ima_appraise_measurement function during the processing of bprm_creds for execution. An attacker could potentially trigger this flaw by causing an incorrect memory offset calculation. This could lead to information disclosure or a denial of service (DoS) due to memory corruption.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-823 · Use of Out-of-range Pointer Offset