CVE-2026-74592
- Source
- https://cve.org/CVERecord?id=CVE-2026-74592
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74592.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-74592
- Downstream
- Published
- 2026-08-22T15:31:43Z
- Modified
- 2026-08-27T11:30:22Z
- Severity
-
- 8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVSS Calculator
- Summary
- ima: Instantiate file_truncate and path_truncate hooks
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
ima: Instantiate file_truncate and path_truncate hooks
Instantiate the file_truncate and path_truncate LSM hooks to reset the action cache flags (IMA_DONE_MASK) as soon as truncation is requested, so the file, based on policy, is re-collected, re-measured, re-audited, and re-appraised on next access.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/74xxx/CVE-2026-74592.json" }- References
-
- https://git.kernel.org/stable/c/0baed1fa2184c81e4baf76f445d3faa4b738c8f7
- https://git.kernel.org/stable/c/5f46705d96eb60587aa7035acfcbec977e08d620
- https://git.kernel.org/stable/c/b80bed5c871a80151351342c065579405ce77145
- https://git.kernel.org/stable/c/dd21c96a71e876c8df9ec546b885a2c5f47bbb05
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/74xxx/CVE-2026-74592.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-74592
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced3323eec921efd815178a23107ab63588c605c0b2Fixed5f46705d96eb60587aa7035acfcbec977e08d620Fixeddd21c96a71e876c8df9ec546b885a2c5f47bbb05Fixed0baed1fa2184c81e4baf76f445d3faa4b738c8f7Fixedb80bed5c871a80151351342c065579405ce77145