Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2025-68183

In the Linux kernel, the following vulnerability has been resolved: ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr Currently when both IMA and EVM are in fix mode, the IMA signature will be reset to IMA hash if a program first stores IMA signature in security.ima and then writes/removes some other security xattr for the file. For example, on Fedora, after booting the kernel with "ima_appraise=fix evm=fix ima_policy=appraise_tcb" and installing rpm-plugin-ima, installi
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:dd9bb4a2573f67f0d63d8a06ff399903a73fa5e57e3e8e42b59f2853a3bca3f5
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["security/integrity/ima/ima_appraise.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.14"},{"lessThan":"5.14","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.117","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.58","versionType":"semver"},{"lessThanOrEqual":"6.17.*","status":"unaffected","version":"6.17.8","versionType":"semve…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:899c8e6b395c0d5ca806a1d25b404936215b995824c6a92729ccafe4764b4eac · sha256:76212c369ab6c47c… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["security/integrity/ima/ima_appraise.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"d2993a7e98eb70c737c6f5365a190e79c72b8407","status":"affected","version":"e3ccfe1ad7d895487977ef64eda3441d16c9851a","versionType":"git"},{"lessThan":"edd824eb45e4f7e05ad3ab090dab6dbdb79cd292","status":"affected","version":"e3ccfe1ad7d895487977ef64eda3441d16c9851a","versionType":"git"},{"lessThan":"02aa671c08a4834bef5166743a7b88686fbfa023","status":"affected","version":"e3ccfe1a…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:899c8e6b395c0d5ca806a1d25b404936215b995824c6a92729ccafe4764b4eac · sha256:76212c369ab6c47c… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["security/integrity/ima/ima_appraise.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.14"},{"lessThan":"5.14","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.117","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.58","versionType":"semver"},{"lessThanOrEqual":"6.17.*","status":"unaffected","version":"6.17.8","versionType":"semve…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:899c8e6b395c0d5ca806a1d25b404936215b995824c6a92729ccafe4764b4eac · sha256:76212c369ab6c47c… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["security/integrity/ima/ima_appraise.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"d2993a7e98eb70c737c6f5365a190e79c72b8407","status":"affected","version":"e3ccfe1ad7d895487977ef64eda3441d16c9851a","versionType":"git"},{"lessThan":"edd824eb45e4f7e05ad3ab090dab6dbdb79cd292","status":"affected","version":"e3ccfe1ad7d895487977ef64eda3441d16c9851a","versionType":"git"},{"lessThan":"02aa671c08a4834bef5166743a7b88686fbfa023","status":"affected","version":"e3ccfe1a…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:899c8e6b395c0d5ca806a1d25b404936215b995824c6a92729ccafe4764b4eac · sha256:76212c369ab6c47c… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion
{"metric":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:899c8e6b395c0d5ca806a1d25b404936215b995824c6a92729ccafe4764b4eac · sha256:76212c369ab6c47c… · /containers/cna/metrics/0/cvssV3_1

Source references

4 source assertions
{"url":"https://git.kernel.org/stable/c/02aa671c08a4834bef5166743a7b88686fbfa023"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:899c8e6b395c0d5ca806a1d25b404936215b995824c6a92729ccafe4764b4eac · sha256:76212c369ab6c47c… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/88b4cbcf6b041ae0f2fc8a34554a5b6a83a2b7cd"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:899c8e6b395c0d5ca806a1d25b404936215b995824c6a92729ccafe4764b4eac · sha256:76212c369ab6c47c… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/d2993a7e98eb70c737c6f5365a190e79c72b8407"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:899c8e6b395c0d5ca806a1d25b404936215b995824c6a92729ccafe4764b4eac · sha256:76212c369ab6c47c… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/edd824eb45e4f7e05ad3ab090dab6dbdb79cd292"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:899c8e6b395c0d5ca806a1d25b404936215b995824c6a92729ccafe4764b4eac · sha256:76212c369ab6c47c… · /containers/cna/references/1

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer