{
  "affected": [
    {
      "ranges": [
        {
          "events": [
            {
              "introduced": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2"
            },
            {
              "fixed": "9854538349aaf6fb88ed33b56987954ac1716151"
            },
            {
              "fixed": "3c31397b0a75310217f1f2f3c7bdfd8af67aec4c"
            },
            {
              "fixed": "849a7bd9d266e43a457db5c6b322600f916a2127"
            },
            {
              "fixed": "e4563e07ef5c938d5332c5c44721db976f214bc6"
            },
            {
              "fixed": "21eaf5594a33d16343a011c752624099c30e918f"
            },
            {
              "fixed": "89b9121c3b0162655fc2f190b714ae64f1aa8cae"
            },
            {
              "fixed": "69ecc199880bf7e8d06224c82dc411d18f9285f8"
            },
            {
              "fixed": "3349ef6a366a61d631f6a263d12cea240957719d"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Linux",
        "name": "Kernel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "2.6.12"
            },
            {
              "fixed": "5.10.265"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "5.11.0"
            },
            {
              "fixed": "5.15.216"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "5.16.0"
            },
            {
              "fixed": "6.1.183"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.2.0"
            },
            {
              "fixed": "6.6.148"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.7.0"
            },
            {
              "fixed": "6.12.101"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.13.0"
            },
            {
              "fixed": "6.18.42"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.19.0"
            },
            {
              "fixed": "7.1.6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68151.json"
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nbinfmt_elf_fdpic: only honour the first PT_INTERP\n\nThe program header scan handles PT_INTERP from a switch nested in the\nscan loop, so its break leaves the switch and not the loop. A binary\ncarrying more than one PT_INTERP runs the case again and overwrites both\ninterpreter_name and interpreter. The previous name allocation leaks and\nso does the previous interpreter reference, along with the write denial\nopen_exec() took on it. The denial is never released, so the file stays\nunwritable for as long as the system runs.\n\nAn unprivileged caller reaches this with a crafted binary and repeats it\nat will. binfmt_elf stops at the first PT_INTERP. Do the same here.\n\nThe flaw dates back to the driver's introduction in the pre-git history\ntree introduced in v2.6.11 by 91808d6ebe39 (\"[PATCH] FRV: Add FDPIC ELF\nbinary format driver\").",
  "id": "CVE-2026-68151",
  "modified": "2026-08-21T03:30:28.343135720Z",
  "published": "2026-08-10T11:59:16.878Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/21eaf5594a33d16343a011c752624099c30e918f"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/3349ef6a366a61d631f6a263d12cea240957719d"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/3c31397b0a75310217f1f2f3c7bdfd8af67aec4c"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/69ecc199880bf7e8d06224c82dc411d18f9285f8"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/849a7bd9d266e43a457db5c6b322600f916a2127"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/89b9121c3b0162655fc2f190b714ae64f1aa8cae"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/9854538349aaf6fb88ed33b56987954ac1716151"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/e4563e07ef5c938d5332c5c44721db976f214bc6"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/68xxx/CVE-2026-68151.json"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68151"
    },
    {
      "type": "PACKAGE",
      "url": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
    }
  ],
  "schema_version": "1.9.0",
  "summary": "binfmt_elf_fdpic: only honour the first PT_INTERP"
}