In the Linux kernel, the following vulnerability has been resolved:
spufs: fix a leak on spufsnewfile() failure
It's called from spufsfilldir(), and caller of that will do spufs_rmdir() in case of failure. That does remove everything we'd managed to create, but... the problem dentry is still negative. IOW, it needs to be explicitly dropped.
[ { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d1ca8698ca1332625d83ea0d753747be66f9906d", "signature_version": "v1", "target": { "function": "spufs_fill_dir", "file": "arch/powerpc/platforms/cell/spufs/inode.c" }, "digest": { "function_hash": "208201307768749753139094751248642037763", "length": 391.0 }, "id": "CVE-2025-22073-013d99f6" }, { "signature_type": "Line", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@96de7fbdc2dcadeebc17c3cb89e7cdab487bfce0", "signature_version": "v1", "target": { "file": "arch/powerpc/platforms/cell/spufs/inode.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "246532520170097093602460815753754717530", "48832609721026743853031721930109252779", "39694302951062840478038410446743040106", "139260679823981481843621294731371735031", "159469869422641708967239375044498325355" ] }, "id": "CVE-2025-22073-0265868a" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@53b189651c33b5f1fb3b755e6a37a8206978514e", "signature_version": "v1", "target": { "function": "spufs_fill_dir", "file": "arch/powerpc/platforms/cell/spufs/inode.c" }, "digest": { "function_hash": "208201307768749753139094751248642037763", "length": 391.0 }, "id": "CVE-2025-22073-03aaa07f" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b1eef06d10c1a9848e3a762919bbbe315a0a7cb4", "signature_version": "v1", "target": { "function": "spufs_fill_dir", "file": "arch/powerpc/platforms/cell/spufs/inode.c" }, "digest": { "function_hash": "208201307768749753139094751248642037763", "length": 391.0 }, "id": "CVE-2025-22073-08c5dcf4" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0bd56e4e72c354b65c0a7e5ac1c09eca81949d5b", "signature_version": "v1", "target": { "function": "spufs_fill_dir", "file": "arch/powerpc/platforms/cell/spufs/inode.c" }, "digest": { "function_hash": "208201307768749753139094751248642037763", "length": 391.0 }, "id": "CVE-2025-22073-0f494f40" }, { "signature_type": "Line", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@90d1b276d1b1379d20ad27d1f6349ba9f44a2e00", "signature_version": "v1", "target": { "file": "arch/powerpc/platforms/cell/spufs/inode.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "246532520170097093602460815753754717530", "48832609721026743853031721930109252779", "39694302951062840478038410446743040106", "139260679823981481843621294731371735031", "159469869422641708967239375044498325355" ] }, "id": "CVE-2025-22073-1036ca82" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@90d1b276d1b1379d20ad27d1f6349ba9f44a2e00", "signature_version": "v1", "target": { "function": "spufs_fill_dir", "file": "arch/powerpc/platforms/cell/spufs/inode.c" }, "digest": { "function_hash": "208201307768749753139094751248642037763", "length": 391.0 }, "id": "CVE-2025-22073-13f65c44" }, { "signature_type": "Line", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@132925bd6772d7614340fb755ac5415462ac8edd", "signature_version": "v1", "target": { "file": "arch/powerpc/platforms/cell/spufs/inode.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "246532520170097093602460815753754717530", "48832609721026743853031721930109252779", "39694302951062840478038410446743040106", "139260679823981481843621294731371735031", "159469869422641708967239375044498325355" ] }, "id": "CVE-2025-22073-167dedbc" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@35f789ccebd69f6f9a1e0a9b85435003b2450065", "signature_version": "v1", "target": { "function": "spufs_fill_dir", "file": "arch/powerpc/platforms/cell/spufs/inode.c" }, "digest": { "function_hash": "208201307768749753139094751248642037763", "length": 391.0 }, "id": "CVE-2025-22073-3b20c865" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@132925bd6772d7614340fb755ac5415462ac8edd", "signature_version": "v1", "target": { "function": "spufs_fill_dir", "file": "arch/powerpc/platforms/cell/spufs/inode.c" }, "digest": { "function_hash": "208201307768749753139094751248642037763", "length": 391.0 }, "id": "CVE-2025-22073-533ebf1b" }, { "signature_type": "Line", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@0bd56e4e72c354b65c0a7e5ac1c09eca81949d5b", "signature_version": "v1", "target": { "file": "arch/powerpc/platforms/cell/spufs/inode.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "246532520170097093602460815753754717530", "48832609721026743853031721930109252779", "39694302951062840478038410446743040106", "139260679823981481843621294731371735031", "159469869422641708967239375044498325355" ] }, "id": "CVE-2025-22073-6b61d926" }, { "signature_type": "Line", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d791985ceeb081155b4e96d314ca54c7605dcbe0", "signature_version": "v1", "target": { "file": "arch/powerpc/platforms/cell/spufs/inode.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "246532520170097093602460815753754717530", "48832609721026743853031721930109252779", "39694302951062840478038410446743040106", "139260679823981481843621294731371735031", "159469869422641708967239375044498325355" ] }, "id": "CVE-2025-22073-a4044e26" }, { "signature_type": "Line", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@35f789ccebd69f6f9a1e0a9b85435003b2450065", "signature_version": "v1", "target": { "file": "arch/powerpc/platforms/cell/spufs/inode.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "246532520170097093602460815753754717530", "48832609721026743853031721930109252779", "39694302951062840478038410446743040106", "139260679823981481843621294731371735031", "159469869422641708967239375044498325355" ] }, "id": "CVE-2025-22073-a849fbe7" }, { "signature_type": "Line", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b1eef06d10c1a9848e3a762919bbbe315a0a7cb4", "signature_version": "v1", "target": { "file": "arch/powerpc/platforms/cell/spufs/inode.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "246532520170097093602460815753754717530", "48832609721026743853031721930109252779", "39694302951062840478038410446743040106", "139260679823981481843621294731371735031", "159469869422641708967239375044498325355" ] }, "id": "CVE-2025-22073-b11ccd76" }, { "signature_type": "Line", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d1ca8698ca1332625d83ea0d753747be66f9906d", "signature_version": "v1", "target": { "file": "arch/powerpc/platforms/cell/spufs/inode.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "246532520170097093602460815753754717530", "48832609721026743853031721930109252779", "39694302951062840478038410446743040106", "139260679823981481843621294731371735031", "159469869422641708967239375044498325355" ] }, "id": "CVE-2025-22073-dc43f66a" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d791985ceeb081155b4e96d314ca54c7605dcbe0", "signature_version": "v1", "target": { "function": "spufs_fill_dir", "file": "arch/powerpc/platforms/cell/spufs/inode.c" }, "digest": { "function_hash": "208201307768749753139094751248642037763", "length": 391.0 }, "id": "CVE-2025-22073-e2611ab7" }, { "signature_type": "Line", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@53b189651c33b5f1fb3b755e6a37a8206978514e", "signature_version": "v1", "target": { "file": "arch/powerpc/platforms/cell/spufs/inode.c" }, "digest": { "threshold": 0.9, "line_hashes": [ "246532520170097093602460815753754717530", "48832609721026743853031721930109252779", "39694302951062840478038410446743040106", "139260679823981481843621294731371735031", "159469869422641708967239375044498325355" ] }, "id": "CVE-2025-22073-e4f334e6" }, { "signature_type": "Function", "deprecated": false, "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@96de7fbdc2dcadeebc17c3cb89e7cdab487bfce0", "signature_version": "v1", "target": { "function": "spufs_fill_dir", "file": "arch/powerpc/platforms/cell/spufs/inode.c" }, "digest": { "function_hash": "208201307768749753139094751248642037763", "length": 391.0 }, "id": "CVE-2025-22073-f0010a27" } ]