SEPTEMBER 23, 2026
Live Feed
Back to database
Case File

CVE-2026-74487

UNKNOWN · CVSS N/A EPSS 0.18%

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

A vulnerability in the Linux kernel's binfmt_misc subsystem affects the handling of interpreter files registered with the MISC_FMT_OPEN_FILE flag, resulting in a failure to restore write access upon entry removal. This oversight can lead to a persistent write denial error (ETXTBSY) for users attempting to modify the interpreter, potentially disrupting operations that rely on these files. System administrators and developers utilizing affected Linux kernel versions should prioritize applying the fix to ensure proper file access management and maintain system functionality.

CVE
CVE-2026-74487
Severity
UNKNOWN
CVSS
N/A
EPSS
0.18%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: restore write access when removing an entry Registering an entry with the MISC_FMT_OPEN_FILE flag opens the interpreter via open_exec() which denies write access to it for as long as the entry exists. Removing the entry closes the interpreter file via filp_close() but never restores write access, leaving the inode's i_writecount permanently negative. Opening the interpreter for writing keeps failing with ETXTBSY long after the entry is gone until the inode is evicted from the inode cache. Commit 90f601b497d7 ("binfmt_misc: restore write access before closing files opened by open_exec()") fixed the same imbalance in the error path of bm_register_write() but the actual removal path has been leaking the write denial since the introduction of the flag. Restore write access in put_binfmt_handler() before closing the interpreter file.