SB20260824244 - Improper Initialization in Linux kernel integrity ima

Description

This security bulletin contains information about 1 vulnerability.

1) Improper Initialization (CVE-ID: CVE-2026-74592)

CWE-ID: CWE-665 - Improper Initialization

CVSSv4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a local user to bypass integrity measurement and appraisal of truncated files.

The vulnerability exists due to improper state management in the integrity measurement architecture truncate hook handling when truncation is requested for a regular file. A local user can truncate a file to bypass integrity measurement and appraisal of truncated files.

The issue affects files whose IMA action cache flags are not reset after content changes caused by truncation.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/0baed1fa2184c81e4baf76f445d3faa4b738c8f7
• https://git.kernel.org/stable/c/5f46705d96eb60587aa7035acfcbec977e08d620
• https://git.kernel.org/stable/c/b80bed5c871a80151351342c065579405ce77145
• https://git.kernel.org/stable/c/dd21c96a71e876c8df9ec546b885a2c5f47bbb05