CVE-2025-68351: exfat: fix refcount leak in exfat_find
In the Linux kernel, the following vulnerability has been resolved:
exfat: fix refcount leak in exfatfind
Fix refcount leaks in exfatfind related to exfatgetdentryset.
Function exfatgetdentryset would increase the reference counter of es->bh on success. Therefore, exfatputdentryset must be called after exfatgetdentryset to ensure refcount consistency. This patch relocate two checks to avoid possible leaks.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68351?
CVE-2025-68351 has been classified as a moderate severity vulnerability due to the potential for reference count leaks.
How do I fix CVE-2025-68351?
To fix CVE-2025-68351, users should apply the latest patches provided by their Linux distribution that address the reference count leak in the exfat module.
What systems are affected by CVE-2025-68351?
CVE-2025-68351 affects the Linux kernel, particularly versions where the exfat file system is used.
What is the nature of the vulnerability in CVE-2025-68351?
CVE-2025-68351 involves a reference count leak in the `exfat_find` function related to the `exfat_get_dentry_set` process.
What are the potential impacts of CVE-2025-68351?
The potential impacts of CVE-2025-68351 include increased resource consumption and possible denial of service through unbounded resource allocation.