PT-2026-2499 · Apple+3 · Apple Macos+3

Published 2025-11-15 · Updated 2026-05-11 · CVE-2025-68767

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains an issue where the S IFMT bits of inode->i mode can become invalid when the S IFMT bits of the "mode" field loaded from disk are corrupted. This occurs because the permissions field was treated as reserved in older macOS versions and should remain zero. When the "mode" field is not zero, the file must be a directory if dir is 1, or a regular file, symbolic link, character device, block device, FIFO, or socket if dir is 0.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

AZL-74315

BDU:2026-00742

CVE-2025-68767

ECHO-E4F3-1B9C-6A1C

MGASA-2026-0017

MGASA-2026-0018

SUSE-SU-2026:0473-1

USN-8096-1

USN-8096-2

USN-8096-3

USN-8096-4

USN-8096-5

USN-8116-1

USN-8141-1

USN-8163-1

USN-8163-2

USN-8177-1

USN-8177-2

USN-8179-1

USN-8179-2

USN-8179-3

USN-8179-4

USN-8183-1

USN-8183-2

USN-8184-1

USN-8185-1

USN-8185-2

USN-8203-1

USN-8204-1

USN-8243-1

USN-8245-1

USN-8257-1

USN-8258-1

USN-8260-1

USN-8261-1

USN-8265-1

Affected Products

Linuxmint

Linux Kernel

Ubuntu

Apple Macos

References · 1155

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68767.json · Exploit
• https://ubuntu.com/security/CVE-2025-71095 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68244 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68340 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68745 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38125 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40321 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71117 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8203-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40051 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68307 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68758 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68337 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68818 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23003 · Vendor Advisory