In the Linux kernel, the following vulnerability has been resolved:
ubifs: Fix memory leak in do_rename
If renaming a file in an encrypted directory, function fscrypt_setup_filename allocates memory for a file name. This name is never used, and before returning to the caller the memory for it is not freed.
When running kmemleak on it we see that it is registered as a leak. The report below is triggered by a simple program 'rename' that renames a file in an encrypted directory:
unreferenced object 0xffff888101502840 (size 32): comm "rename", pid 9404, jiffies 4302582475 (age 435.735s) backtrace: __kmem_cache_alloc_node __kmalloc fscrypt_setup_filename do_rename ubifs_rename vfs_rename do_renameat2
To fix this we can remove the call to fscrypt_setup_filename as it's not needed.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Sep 22, 2025 | Sep 22, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Sep 18, 2025 |
| Ubuntu | — | Upgrade linux-nvidia-tegra-igxUpgrade linux-aws-5.15Upgrade linux-raspiUpgrade linux-hwe-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linuxUpgrade linux-awsUpgrade linux-nvidia-tegraUpgrade linux-oracleUpgrade linux-intel-iotg-5.15Upgrade linux-lowlatencyUpgrade linux-intel-iotgUpgrade linux-ibm-5.15Upgrade linux-gcpUpgrade linux-gcp-5.15Upgrade linux-gkeUpgrade linux-intel-iot-realtimeUpgrade linux-azure-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-realtimeUpgrade linux-ibmUpgrade linux-azureUpgrade linux-bluefieldUpgrade linux-nvidiaUpgrade linux-xilinx-zynqmpUpgrade linux-riscv-5.15Upgrade linux-gkeopUpgrade linux-kvmUpgrade linux-oracle-5.15 | Sep 26, 2025 | Sep 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub