CVE-2025-22073

In the Linux kernel, the following vulnerability has been resolved: spufs: fix a leak on spufs_new_file() failure It's called from spufs_fill_dir(), and caller of that will do spufs_rmdir() in case of failure. That does remove everything we'd managed to create, but... the problem dentry is still negative. IOW, it needs to be explicitly dropped.

Score

CVSS 3.1 5.5 Medium

Status

Modified - 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Published

2025-04-16

Last modified

2026-05-11

Weaknesses

CWE-401

Affected products

• Linux Kernel (Linux)

References

• https://git.kernel.org/stable/c/0bd56e4e72c354b65c0a7e5ac1c09eca81949d5b
• https://git.kernel.org/stable/c/132925bd6772d7614340fb755ac5415462ac8edd
• https://git.kernel.org/stable/c/35f789ccebd69f6f9a1e0a9b85435003b2450065
• https://git.kernel.org/stable/c/53b189651c33b5f1fb3b755e6a37a8206978514e
• https://git.kernel.org/stable/c/90d1b276d1b1379d20ad27d1f6349ba9f44a2e00
• https://git.kernel.org/stable/c/96de7fbdc2dcadeebc17c3cb89e7cdab487bfce0
• https://git.kernel.org/stable/c/b1eef06d10c1a9848e3a762919bbbe315a0a7cb4
• https://git.kernel.org/stable/c/d1ca8698ca1332625d83ea0d753747be66f9906d
• https://git.kernel.org/stable/c/d791985ceeb081155b4e96d314ca54c7605dcbe0
• https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html