Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2025-68740

In the Linux kernel, the following vulnerability has been resolved: ima: Handle error code returned by ima_filter_rule_match() In ima_match_rules(), if ima_filter_rule_match() returns -ENOENT due to the rule being NULL, the function incorrectly skips the 'if (!rc)' check and sets 'result = true'. The LSM rule is considered a match, causing extra files to be measured by IMA. This issue can be reproduced in the following scenario: After unloading the SELinux policy module via 'semodule -d', if
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:1080c4ee0701a4e33b7ece49a4643abff244a19351cc6ea8a9fdb4829278ebe2
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["security/integrity/ima/ima_policy.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"d14e0ec6a6828ee0dffa163fb5d513c9a21f0a51","status":"affected","version":"4af4662fa4a9dc62289c580337ae2506339c4729","versionType":"git"},{"lessThan":"f2f4627b74c120fcdd8e1db93bc91f9bbaf46f85","status":"affected","version":"4af4662fa4a9dc62289c580337ae2506339c4729","versionType":"git"},{"lessThan":"88cd5fbf5869731be8fc6f7cecb4e0d6ab3d8749","status":"affected","version":"4af4662fa4…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:e222bda81c3ad403e3fad16dd079282153030f1a259481463ca9f8739da4373b · sha256:70d9e028ef75a092… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["security/integrity/ima/ima_policy.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.30"},{"lessThan":"2.6.30","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.248","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.198","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.160","versionType":"…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:e222bda81c3ad403e3fad16dd079282153030f1a259481463ca9f8739da4373b · sha256:70d9e028ef75a092… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["security/integrity/ima/ima_policy.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"d14e0ec6a6828ee0dffa163fb5d513c9a21f0a51","status":"affected","version":"4af4662fa4a9dc62289c580337ae2506339c4729","versionType":"git"},{"lessThan":"f2f4627b74c120fcdd8e1db93bc91f9bbaf46f85","status":"affected","version":"4af4662fa4a9dc62289c580337ae2506339c4729","versionType":"git"},{"lessThan":"88cd5fbf5869731be8fc6f7cecb4e0d6ab3d8749","status":"affected","version":"4af4662fa4…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:e222bda81c3ad403e3fad16dd079282153030f1a259481463ca9f8739da4373b · sha256:70d9e028ef75a092… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["security/integrity/ima/ima_policy.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.30"},{"lessThan":"2.6.30","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.248","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.198","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.160","versionType":"…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:e222bda81c3ad403e3fad16dd079282153030f1a259481463ca9f8739da4373b · sha256:70d9e028ef75a092… · /containers/cna/affected/1

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/32952c4f4d1b2deb30dce72ba109da808a9018e1"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:e222bda81c3ad403e3fad16dd079282153030f1a259481463ca9f8739da4373b · sha256:70d9e028ef75a092… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/738c9738e690f5cea24a3ad6fd2d9a323cf614f6"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:e222bda81c3ad403e3fad16dd079282153030f1a259481463ca9f8739da4373b · sha256:70d9e028ef75a092… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/88cd5fbf5869731be8fc6f7cecb4e0d6ab3d8749"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:e222bda81c3ad403e3fad16dd079282153030f1a259481463ca9f8739da4373b · sha256:70d9e028ef75a092… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/c2238d487a640ae3511e1b6f4640ab27ce10d7f6"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:e222bda81c3ad403e3fad16dd079282153030f1a259481463ca9f8739da4373b · sha256:70d9e028ef75a092… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/cca3e7df3c0f99542033657ba850b9a6d27f8784"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:e222bda81c3ad403e3fad16dd079282153030f1a259481463ca9f8739da4373b · sha256:70d9e028ef75a092… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/d14e0ec6a6828ee0dffa163fb5d513c9a21f0a51"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:e222bda81c3ad403e3fad16dd079282153030f1a259481463ca9f8739da4373b · sha256:70d9e028ef75a092… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/de4431faf308d0c533cb386f5fa9af009bc86158"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:e222bda81c3ad403e3fad16dd079282153030f1a259481463ca9f8739da4373b · sha256:70d9e028ef75a092… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/f2f4627b74c120fcdd8e1db93bc91f9bbaf46f85"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:e222bda81c3ad403e3fad16dd079282153030f1a259481463ca9f8739da4373b · sha256:70d9e028ef75a092… · /containers/cna/references/1

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer