Description
In the Linux kernel, the following vulnerability has been resolved: spufs: fix a leak on spufs_new_file() failure It's called from spufs_fill_dir(), and caller of that will do spufs_rmdir() in case of failure. That does remove everything we'd managed to create, but... the problem dentry is still negative. IOW, it needs to be explicitly dropped.
References (10)
Core 10
Core References
Scores
CVSS v3
5.5
EPSS
0.0017
EPSS Percentile
7.1%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-401
Status
published
Products (29)
linux/Kernel
2.6.16 - 5.4.292linux
linux/Kernel
5.11.0 - 5.15.180linux
linux/Kernel
5.16.0 - 6.1.134linux
linux/Kernel
5.5.0 - 5.10.236linux
linux/Kernel
6.13.0 - 6.13.11linux
linux/Kernel
6.14.0 - 6.14.2linux
linux/Kernel
6.2.0 - 6.6.87linux
linux/Kernel
6.7.0 - 6.12.23linux
Linux/Linux
< 2.6.16
Linux/Linux
2.6.16
... and 19 more
Published
Apr 16, 2025
Tracked Since
Feb 18, 2026