CVE-2026-68186

A flaw was found in the binfmt_misc component of the Linux kernel. An unprivileged user can exploit this by registering a binfmt_misc entry with a specially crafted interpreter path on a FUSE (Filesystem in Userspace) mount. If the interpreter open fails, it can lead to a NULL pointer dereference when executing a matching binary. This vulnerability could result in a denial of service.

This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux because exploitation is restricted to local unprivileged users and exclusively leads to a kernel crash (denial of service) without compromising confidentiality or integrity. To trigger this flaw, an attacker must have local execution rights, leverage user namespaces to mount binfmt_misc, and coordinate binary execution through a custom FUSE filesystem that returns an error during interpreter initialization. Consequently, remote exploitation is not possible, and systems with restricted user namespaces have reduced exposure. Older enterprise releases, including Red Hat Enterprise Linux 8, do not contain the affected code.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.