- Vulnerability/
- CVE-2025-22072
CVE-2025-22072: spufs: fix gang directory lifetimes
First published: Wed Apr 16 2025(Updated: )
In the Linux kernel, the following vulnerability has been resolved: spufs: fix gang directory lifetimes prior to "[POWERPC] spufs: Fix gang destroy leaks" we used to have a problem with gang lifetimes - creation of a gang returns opened gang directory, which normally gets removed when that gets closed, but if somebody has created a context belonging to that gang and kept it alive until the gang got closed, removal failed and we ended up with a leak. Unfortunately, it had been fixed the wrong way. Dentry of gang directory was no longer pinned, and rmdir on close was gone. One problem was that failure of open kept calling simple_rmdir() as cleanup, which meant an unbalanced dput(). Another bug was in the success case - gang creation incremented link count on root directory, but that was no longer undone when gang got destroyed. Fix consists of * reverting the commit in question * adding a counter to gang, protected by ->i_rwsem of gang directory inode. * having it set to 1 at creation time, dropped in both spufs_dir_close() and spufs_gang_close() and bumped in spufs_create_context(), provided that it's not 0. * using simple_recursive_removal() to take the gang directory out when counter reaches zero.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Kernel | <prior to [POWERPC] spufs: Fix gang destroy leaks |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/stable/c/880e7b3da2e765c1f90c94c0539be039e96c7062
- https://git.kernel.org/stable/c/324f280806aab28ef757aecc18df419676c10ef8
- https://git.kernel.org/stable/c/029d8c711f5e5fe8cf63e8a4a1a140a06e224e45
- https://git.kernel.org/stable/c/903733782f3ae28a2f7fe4dfb47c7fe3e079a528
- https://git.kernel.org/stable/c/fc646a6c6d14b5d581f162a7e32999f789e3a3ac
- https://git.kernel.org/stable/c/c134deabf4784e155d360744d4a6a835b9de4dd4
Frequently Asked Questions
What is the severity of CVE-2025-22072?
CVE-2025-22072 has been categorized with a severity level that indicates a potential risk, depending on the system configuration and exposure.
How do I fix CVE-2025-22072?
To fix CVE-2025-22072, you should update your Linux kernel to the version that includes the patch for the gang directory lifetimes.
What systems are affected by CVE-2025-22072?
CVE-2025-22072 affects Linux Kernel versions prior to the fix for the POWERPC spufs gang directory issue.
What does CVE-2025-22072 vulnerability involve?
CVE-2025-22072 involves issues with gang directory lifetimes within the Linux kernel, leading to potential leaks during directory handling.
Is there a workaround for CVE-2025-22072?
There is no specific workaround for CVE-2025-22072; applying the patch is the recommended solution.
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/references
- agent/first-publish-date
- agent/type
- agent/description
- agent/guess-ai
- agent/software-canonical-lookup
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/source
- agent/author
- agent/last-modified-date
- agent/tags
- agent/event
- vendor/linux foundation
- canonical/linux kernel