CVE-2026-74592ima: Instantiate file_truncate and path_truncate hooks
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: ima: Instantiate file_truncate and path_truncate hooks Instantiate the file_truncate and path_truncate LSM hooks to reset the action cache flags (IMA_DONE_MASK) as soon as truncation is requested, so the file, based on policy, is re-collected, re-measured, re-audited, and re-appraised on next access.
- CVSS
- 8.1 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 16, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | 3323eec921efd815178a23107ab63588c605c0b2 builds before 5f46705d96eb60587aa7035acfcbec977e08d620; from 3323eec921efd815178a23107ab63588c605c0b2 before dd21c96a71e876c8df9ec546b885a2c5f47bbb05; 3323eec921efd815178a23107ab63588c605c0b2 builds before 0baed1fa2184c81e4baf76f445d3faa4b738c8f7; from 3323eec921efd815178a23107ab63588c605c0b2 before b80bed5c871a80151351342c065579405ce77145 | CNA record |
References
- https://git.kernel.org/stable/c/5f46705d96eb60587aa7035acfcbec977e08d620
- https://git.kernel.org/stable/c/dd21c96a71e876c8df9ec546b885a2c5f47bbb05
- https://git.kernel.org/stable/c/0baed1fa2184c81e4baf76f445d3faa4b738c8f7
- https://git.kernel.org/stable/c/b80bed5c871a80151351342c065579405ce77145
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.