CVE-2025-22073

spufs: fix a leak on spufs_new_file() failure

State: Published
Severity: Not scored
Published: Apr 16, 2025
Updated: May 11, 2026
Reserved: Dec 29, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

spufs: fix a leak on spufs_new_file() failure

It's called from spufs_fill_dir(), and caller of that will do spufs_rmdir() in case of failure. That does remove everything we'd managed to create, but... the problem dentry is still negative. IOW, it needs to be explicitly dropped.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	3f51dd91c80746a5cf76f8c4a77bfc88aa82bb9e to before b1eef06d10c1a9848e3a762919bbbe315a0a7cb4Affected 3f51dd91c80746a5cf76f8c4a77bfc88aa82bb9e to before 132925bd6772d7614340fb755ac5415462ac8eddAffected 3f51dd91c80746a5cf76f8c4a77bfc88aa82bb9e to before 53b189651c33b5f1fb3b755e6a37a8206978514eAffected 3f51dd91c80746a5cf76f8c4a77bfc88aa82bb9e to before 96de7fbdc2dcadeebc17c3cb89e7cdab487bfce0Affected 3f51dd91c80746a5cf76f8c4a77bfc88aa82bb9e to before 90d1b276d1b1379d20ad27d1f6349ba9f44a2e00Affected 3f51dd91c80746a5cf76f8c4a77bfc88aa82bb9e to before 35f789ccebd69f6f9a1e0a9b85435003b2450065Affected 3f51dd91c80746a5cf76f8c4a77bfc88aa82bb9e to before d791985ceeb081155b4e96d314ca54c7605dcbe0Affected 3f51dd91c80746a5cf76f8c4a77bfc88aa82bb9e to before 0bd56e4e72c354b65c0a7e5ac1c09eca81949d5bAffected 3f51dd91c80746a5cf76f8c4a77bfc88aa82bb9e to before d1ca8698ca1332625d83ea0d753747be66f9906dAffected
LinuxLinux	2.6.16Affected before 2.6.16Not affected 5.4.292 through 5.4.Not affected 5.10.236 through 5.10.Not affected 5.15.180 through 5.15.Not affected 6.1.134 through 6.1.Not affected 6.6.87 through 6.6.Not affected 6.12.23 through 6.12.Not affected 6.13.11 through 6.13.Not affected 6.14.2 through 6.14.Not affected 6.15 and laterNot affected

Product

Versions

LinuxLinux

3f51dd91c80746a5cf76f8c4a77bfc88aa82bb9e to before b1eef06d10c1a9848e3a762919bbbe315a0a7cb4Affected
3f51dd91c80746a5cf76f8c4a77bfc88aa82bb9e to before 132925bd6772d7614340fb755ac5415462ac8eddAffected
3f51dd91c80746a5cf76f8c4a77bfc88aa82bb9e to before 53b189651c33b5f1fb3b755e6a37a8206978514eAffected
3f51dd91c80746a5cf76f8c4a77bfc88aa82bb9e to before 96de7fbdc2dcadeebc17c3cb89e7cdab487bfce0Affected
3f51dd91c80746a5cf76f8c4a77bfc88aa82bb9e to before 90d1b276d1b1379d20ad27d1f6349ba9f44a2e00Affected
3f51dd91c80746a5cf76f8c4a77bfc88aa82bb9e to before 35f789ccebd69f6f9a1e0a9b85435003b2450065Affected
3f51dd91c80746a5cf76f8c4a77bfc88aa82bb9e to before d791985ceeb081155b4e96d314ca54c7605dcbe0Affected
3f51dd91c80746a5cf76f8c4a77bfc88aa82bb9e to before 0bd56e4e72c354b65c0a7e5ac1c09eca81949d5bAffected
3f51dd91c80746a5cf76f8c4a77bfc88aa82bb9e to before d1ca8698ca1332625d83ea0d753747be66f9906dAffected

LinuxLinux

2.6.16Affected
before 2.6.16Not affected
5.4.292 through 5.4.*Not affected
5.10.236 through 5.10.*Not affected
5.15.180 through 5.15.*Not affected
6.1.134 through 6.1.*Not affected
6.6.87 through 6.6.*Not affected
6.12.23 through 6.12.*Not affected
6.13.11 through 6.13.*Not affected
6.14.2 through 6.14.*Not affected
6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.