CVE-2025-22070: fs/9p: fix NULL pointer dereference on mkdir
fs/9p: fix NULL pointer dereference on mkdir
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
In fs/9p/vfs_inode_dotl.c in v9fs_vfs_mkdir_dotl(), fix the NULL fid dereference by swapping the sequence of the two calls so v9fs_set_create_acl() is called after the default ACL set for subdirectories (i.e., after the parentdir’s default ACL is established). This prevents calling v9fs_set_create_acl() before default ACL setup, which otherwise leads to v9fs_fid_xattr_set() via v9fs_set_acl() dereferencing a NULL fid pointer.
Linux kernel 9p (fs/9p) Call order in v9fs_vfs_mkdir_dotl() for POSIX ACL mkdir = swap the sequence of calls so that default ACL for subdirectories is set before calling v9fs_set_create_acl()
Event History
Frequently Asked Questions
What is the severity of CVE-2025-22070?
CVE-2025-22070 has a severity rating that indicates it can lead to a NULL pointer dereference in the Linux kernel.
How do I fix CVE-2025-22070?
To fix CVE-2025-22070, install the latest updates or patches for the Linux kernel that address this vulnerability.
What versions of the Linux kernel are affected by CVE-2025-22070?
CVE-2025-22070 affects specific versions of the Linux kernel when the 9p file system is used with the 'posixacl' option.
What impact does CVE-2025-22070 have on system stability?
CVE-2025-22070 can potentially cause system instability by triggering a NULL pointer dereference when creating directories.
Is CVE-2025-22070 related to file system security?
Yes, CVE-2025-22070 is related to file system security as it affects the 9p file system in the Linux kernel.