CVE-2025-22070: fs/9p: fix NULL pointer dereference on mkdir
fs/9p: fix NULL pointer dereference on mkdir
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.25-1 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.1.191 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.6.160 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.12.23 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.13.11 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.14.2 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1 - Compensating control
In v9fs_vfs_mkdir_dotl(), swap the sequence of the v9fs_set_create_acl() and v9fs_fid_add() calls so v9fs_set_create_acl() is called before v9fs_fid_add().
Event History
Frequently Asked Questions
What is the severity of CVE-2025-22070?
CVE-2025-22070 has a severity rating that indicates it can lead to a NULL pointer dereference in the Linux kernel.
How do I fix CVE-2025-22070?
To fix CVE-2025-22070, install the latest updates or patches for the Linux kernel that address this vulnerability.
What versions of the Linux kernel are affected by CVE-2025-22070?
CVE-2025-22070 affects specific versions of the Linux kernel when the 9p file system is used with the 'posixacl' option.
What impact does CVE-2025-22070 have on system stability?
CVE-2025-22070 can potentially cause system instability by triggering a NULL pointer dereference when creating directories.
Is CVE-2025-22070 related to file system security?
Yes, CVE-2025-22070 is related to file system security as it affects the 9p file system in the Linux kernel.