CVE-2026-74592

CVE-2026-74592

High · published August 22, 2026

CVSS v3.1
8.1
EPSS
0%
Percentile
26.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ima: Instantiate file_truncate and path_truncate hooks

Instantiate the file_truncate and path_truncate LSM hooks to reset the

action cache flags (IMA_DONE_MASK) as soon as truncation is requested,

so the file, based on policy, is re-collected, re-measured, re-audited,

and re-appraised on next access.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00341 · 26.5th percentile
Published
2026-08-22T20:16Z
References (4)
https://git.kernel.org/stable/c/0baed1fa2184c81e4baf76f445d3faa4b738c8f7 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/5f46705d96eb60587aa7035acfcbec977e08d620 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/b80bed5c871a80151351342c065579405ce77145 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/dd21c96a71e876c8df9ec546b885a2c5f47bbb05 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 22 AUG 15:31Z
    ima: Instantiate file_truncate and path_truncate hooks
    cvelistv5