CVE-2025-22073: spufs: fix a leak on spufs_new_file() failure
In the Linux kernel, the following vulnerability has been resolved:
spufs: fix a leak on spufsnewfile() failure
It's called from spufsfilldir(), and caller of that will do spufsrmdir() in case of failure. That does remove everything we'd managed to create, but... the problem dentry is still negative. IOW, it needs to be explicitly dropped.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-22073?
CVE-2025-22073 has been classified as a moderate severity vulnerability in the Linux kernel.
How do I fix CVE-2025-22073?
To fix CVE-2025-22073, update to the latest version of the Linux kernel where the vulnerability has been patched.
What systems are affected by CVE-2025-22073?
CVE-2025-22073 affects the Linux kernel in various distributions that utilize the SPU file system.
What is the nature of the vulnerability in CVE-2025-22073?
CVE-2025-22073 involves a resource leak during the failure of spufs_new_file(), which can lead to improper resource management.
Is there a public disclosure for CVE-2025-22073?
Yes, CVE-2025-22073 has been publicly disclosed as part of the Linux kernel's release notes for vulnerability management.