CVE-2026-74486
kernel: binfmt_misc: use exe_file_deny_write_access() for the interpreter clone
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 15, 2026
Updated · October 30, 2026
Description
A flaw was found in the Linux kernel's binfmt_misc component. This vulnerability arises from an inconsistency in how write access is managed for cloned interpreter files. When a pre-content watch is applied to an interpreter after its registration, subsequent executions through that entry can lead to an imbalance in write access denials and allowances. This can cause the interpreter file to become permanently unwritable, resulting in a Denial of Service (DoS) where the interpreter cannot be executed.
Statement
This vulnerability is rated as Low impact because triggering the flaw requires local system access under a specialized file-system notification configuration and only causes a local denial of service against the specific interpreter binary. Exploitation does not compromise system integrity or confidentiality, nor does it crash the operating system. Furthermore, the problematic code path was introduced in upstream kernel releases and is not present in supported Red Hat Enterprise Linux kernels.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-911 · Improper Update of Reference Count