PT-2025-52926 · Linux+3 · Linux Kernel+3

Published

2025-12-24

·

Updated

2026-05-11

·

CVE-2025-68733

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)
Description A flaw exists in the Linux kernel's Smack security module where an unprivileged task, permitted to relabel itself, can create new labels by writing their names into its own /proc/PID/attr/smack/current file. This is possible because the do setattr() function imports the provided label before verifying the task's presence on the "relabel-self" list. The correction ensures the "relabel-self" list is checked before label import.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

AZL-73165
CVE-2025-68733
ECHO-D251-D00C-50B8
OPENSUSE-SU-2026:10039-1
OPENSUSE-SU-2026:10301-1
SUSE-SU-2026:0447-1
SUSE-SU-2026:0472-1
SUSE-SU-2026:0587-1
SUSE-SU-2026:20477-1
SUSE-SU-2026:20498-1
SUSE-SU-2026:20845-1
SUSE-SU-2026:20876-1
USN-8094-1
USN-8094-2
USN-8094-3
USN-8094-4
USN-8094-5
USN-8096-1
USN-8096-2
USN-8096-3
USN-8096-4
USN-8096-5
USN-8116-1
USN-8141-1
USN-8152-1
USN-8163-1
USN-8163-2
USN-8179-1
USN-8179-2
USN-8179-3
USN-8179-4
USN-8184-1
USN-8185-1
USN-8185-2
USN-8203-1
USN-8204-1
USN-8243-1
USN-8258-1
USN-8260-1
USN-8261-1
USN-8265-1

Affected Products

Debian
Linux Kernel
Linuxmint
Ubuntu