CVE-2026-74618

A flaw was found in the Linux kernel's binfmt_misc component. An unprivileged local user can exploit this vulnerability by manipulating user and mount namespaces to repeatedly trigger a warning condition during the mounting of binfmt_misc. This repeated triggering can lead to kernel log flooding, kernel tainting, and potentially a system crash (Denial of Service) if the kernel is configured to panic on warnings.

This vulnerability is rated as Moderate impact because exploitation is restricted to authenticated local users with access to unprivileged namespaces and cannot lead to code execution or privilege escalation. An attacker can repeatedly invoke filesystem context operations across process namespace boundaries to trigger an internal kernel warning condition. While default Red Hat Enterprise Linux installations will log warnings and mark the kernel as tainted, a complete denial of service occurs only on environments explicitly configured to panic on kernel warnings.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.