Security Advisory

CVE-2025-71239

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-03-17 09:11:03
Last updated 2026-05-11 21:57:01
Assigner Linux
State PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: audit: add fchmodat2() to change attributes class fchmodat2(), introduced in version 6.6 is currently not in the change attribute class of audit. Calling fchmodat2() to change a file attribute in the same fashion than chmod() or fchmodat() will bypass audit rules such as: -w /tmp/test -p rwa -k test_rwa The current patch adds fchmodat2() to the change attributes class.