Riskcovery

CVE-2025-68351

exfat: fix refcount leak in exfat_find

State
Published
Severity
Not scored
Published
Dec 24, 2025
Updated
May 27, 2026
Reserved
Dec 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

exfat: fix refcount leak in exfat_find

Fix refcount leaks in `exfat_find` related to `exfat_get_dentry_set`.

Function `exfat_get_dentry_set` would increase the reference counter of `es->bh` on success. Therefore, `exfat_put_dentry_set` must be called after `exfat_get_dentry_set` to ensure refcount consistency. This patch relocate two checks to avoid possible leaks.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 92075758782c5edb4c67d0da9e47586a624c22f7 to before fc9ce762525e73438d31b613f18bca92a4d3d578Affected
  • 13940cef95491472760ca261b6713692ece9b946 to before d009ff8959d28d2a33aeb96a5f7e7161c421d78fAffected
  • 13940cef95491472760ca261b6713692ece9b946 to before 9aee8de970f18c2aaaa348e3de86c38e2d956c1dAffected
  • 0c8a1d2afd0dce0ea9257ab8c2271d8db6cb575dAffected
  • 6c627bcc1896ba62ec793d0c00da74f3c93ce3adAffected
  • 6.12.23 to before 6.12.68Affected
  • 6.13.11 to before 6.14Affected
LinuxLinux
  • 6.14Affected
  • before 6.14Not affected
  • 6.12.68 through 6.12.*Not affected
  • 6.18.2 through 6.18.*Not affected
  • 6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.