CVE-2025-22071: spufs: fix a leak in spufs_create_context()
Published Apr 16, 2025
·Updated
In the Linux kernel, the following vulnerability has been resolved:
spufs: fix a leak in spufscreatecontext()
Leak fixes back in 2008 missed one case - if we are trying to set affinity and spufsmkdir() fails, we need to drop the reference to neighbor.
Affected Software
11 affected componentsFixes available
Linux Kernel
Linux Linux kernel>=2.6.25<5.4.292
Linux Linux kernel>=5.5<5.10.236
Linux Linux kernel>=5.11<5.15.180
Linux Linux kernel>=5.16<6.1.134
Linux Linux kernel>=6.2<6.6.87
Linux Linux kernel>=6.7<6.12.23
Linux Linux kernel>=6.13<6.13.11
Linux Linux kernel>=6.14<6.14.2
Microsoft azl3 kernel 6.6.85.1-4
Microsoft azl3 kernel 6.6.92.2-1
Remediation
Event History
Apr 16, 2025
CVE Published
via MITRE·02:12 PM
Data Sourced
via MITRE·02:12 PM
Description
Data Sourced
via NVD·03:16 PM
RemedyDescriptionSeverityWeaknessAffected Software
Jul 11, 2025
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·07:00 AM
Affected Software
Updated
via Microsoft·07:00 AM
SeverityAffected Software
Updated
via Microsoft·07:00 AM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2025-22071?
CVE-2025-22071 is classified as a moderate severity vulnerability in the Linux kernel.
2
How do I fix CVE-2025-22071?
To fix CVE-2025-22071, upgrade to the latest patched version of the Linux kernel.
3
What impact does CVE-2025-22071 have on system performance?
CVE-2025-22071 can lead to resource leaks that may degrade system performance.
4
Is CVE-2025-22071 exploitable remotely?
CVE-2025-22071 is not known to be remotely exploitable without additional conditions.
5
What versions of the Linux kernel are affected by CVE-2025-22071?
CVE-2025-22071 affects specific versions of the Linux kernel that include the vulnerable spufs components.