01 Record

CVE-2026-74486

binfmt_misc: use exe_file_deny_write_access() for the interpreter clone

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

binfmt_misc: use exe_file_deny_write_access() for the interpreter clone

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.17% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 6.7% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Received. NVD last modified this record on 2026-08-23.
Red Hat severity: Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-08-15 12:27Z2 MO AGO

Last updated

2026-08-23 12:47Z2 MO AGO

Reserved

2026-08-15

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-911Improper Update of Reference CountBase

Data version

5.2

Document digest

f202bb790c10fb901d0c86ef422b925fb0b0359cd3044e8ccbcabdf7da12e6ce

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux5b432413f7bbbc8b935138490a57be05c1921684 to < c65eb018c12179b5e2c7afe1f0956298576fecec, bb4715098d8e340bbbdd3a874b31f89867c8067e to < 2bd860b7e752a51185960143cab9fec7bf32c84e, c152be5adc0975c75cc4f50891c9072d52d60b47 to < eea4b7c7711b1e425272d23352af157f45f4c3e3, bf5ed2ef5cdb7b47ce606e3d48ea6eb803b31503 to < 2fdf8b07bee5ef99ec77773a6be05fbb8ee5cdb9, 483217fd6f7ccd98b3ed2531a54f75ed144b4499 to < f1e7ea3c8e070f19771cdaef55bbeda1359ad490, 0357ef03c94ef835bd44a0658b8edb672a9dbf51 to < 255a758697da87a205e072e0cfc35897b8f743b1, 0357ef03c94ef835bd44a0658b8edb672a9dbf51 to < f0edbaf487e4653a680a7abb91c1df94cb7886aa, 0357ef03c94ef835bd44a0658b8edb672a9dbf51 to < fa5990ca8fd917003e526036bcc50413edb9722c, 6.14—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/c65eb018c12179b5e2c7afe1f0956298576fecec
git.kernel.orghttps://git.kernel.org/stable/c/2bd860b7e752a51185960143cab9fec7bf32c84e
git.kernel.orghttps://git.kernel.org/stable/c/eea4b7c7711b1e425272d23352af157f45f4c3e3
git.kernel.orghttps://git.kernel.org/stable/c/2fdf8b07bee5ef99ec77773a6be05fbb8ee5cdb9
git.kernel.orghttps://git.kernel.org/stable/c/f1e7ea3c8e070f19771cdaef55bbeda1359ad490
git.kernel.orghttps://git.kernel.org/stable/c/255a758697da87a205e072e0cfc35897b8f743b1
git.kernel.orghttps://git.kernel.org/stable/c/f0edbaf487e4653a680a7abb91c1df94cb7886aa
git.kernel.orghttps://git.kernel.org/stable/c/fa5990ca8fd917003e526036bcc50413edb9722c

07 Fixed in

Debian 14

linux
Fixed in 7.1.8-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.