CVE-2026-68151
kernel: binfmt_elf_fdpic: only honour the first PT_INTERP
Loading…
Severity
LowRed Hat Product Security
CVSS
Review impact separately from score.
Published · August 10, 2026
Updated · October 15, 2026
Description
A flaw was found in the Linux kernel's binfmt_elf_fdpic component. This component, which handles FDPIC ELF binaries, does not correctly process multiple PT_INTERP program headers. An unprivileged local attacker can exploit this by crafting a malicious binary with more than one PT_INTERP header. Successful exploitation leads to a resource leak where a file remains unwritable indefinitely, causing a denial of service.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-772 · Missing Release of Resource after Effective Lifetime