CVE-2025-71239
MediumSummary
A vulnerability has been identified in the Linux kernel related to the fchmodat2() function, which is not included in the audit attribute class. This function, introduced in version 6.6, allows changing file attributes similarly to chmod().
Risk Assessment
The lack of proper auditing for file attribute change operations may lead to unauthorized modifications, threatening system integrity.
Recommendation
It is recommended to update the Linux kernel to the latest version to ensure proper monitoring of operations related to fchmodat2().
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: audit: add fchmodat2() to change attributes class fchmodat2(), introduced in version 6.6 is currently not in the change attribute class of audit. Calling fchmodat2() to change a file attribute in the same fashion than chmod() or f