cve 2025 68239

CVE-2025-68239 is a Linux kernel vulnerability in the binfmt_misc handler, where a write access bug occurs when bm_register_write opens an executable via open_exec. The kernel denies write access while the file is treated as executable, but under certain error paths the code closes the file without restoring write permission. This logic gap has been fixed upstream by calling exe_file_allow_write_access before filp_close. The tag covers discussion of this specific CVE, its patch, and the underlying issue in the Linux kernel's binfmt_misc subsystem.