In the Linux kernel, the following vulnerability has been resolved:
spufs: fix gang directory lifetimes
prior to "[POWERPC] spufs: Fix gang destroy leaks" we used to have a problem with gang lifetimes - creation of a gang returns opened gang directory, which normally gets removed when that gets closed, but if somebody has created a context belonging to that gang and kept it alive until the gang got closed, removal failed and we ended up with a leak.
Unfortunately, it had been fixed the wrong way. Dentry of gang directory was no longer pinned, and rmdir on close was gone. One problem was that failure of open kept calling simple_rmdir() as cleanup, which meant an unbalanced dput(). Another bug was in the success case - gang creation incremented link count on root directory, but that was no longer undone when gang got destroyed.
Fix consists of * reverting the commit in question * adding a counter to gang, protected by ->i_rwsem of gang directory inode. * having it set to 1 at creation time, dropped in both spufs_dir_close() and spufs_gang_close() and bumped in spufs_create_context(), provided that it's not 0. * using simple_recursive_removal() to take the gang directory out when counter reaches zero.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Apr 29, 2025 | Apr 16, 2025 |
| Ubuntu | — | Upgrade linux-image-gke-64k-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-genericUpgrade linux-image-6.8.0-1039-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.11.0-1011-realtimeUpgrade linux-image-oracle-6.8Upgrade linux-image-6.11.0-1017-oracleUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1038-gkeUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1041-azureUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-86-lowlatencyUpgrade linux-image-6.8.0-1029-azure-nvidiaUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-virtualUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.1-1036-realtimeUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.11.0-1015-lowlatencyUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-6.8.0-1044-azure-fipsUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-6.8Upgrade linux-image-gkeopUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1042-gcp-64kUpgrade linux-image-gke-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-6.8.0-1041-raspiUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-aws-64kUpgrade linux-image-gcp-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-6.11.0-1015-awsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1038-gke-64kUpgrade linux-image-gkeUpgrade linux-image-nvidiaUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1041-awsUpgrade linux-image-6.8.0-1041-aws-64kUpgrade linux-image-generic-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-6.11.0-1014-raspiUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-realtimeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1041-nvidia-lowlatencyUpgrade linux-image-6.8.0-1041-nvidia-lowlatency-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-aws-64k-6.8Upgrade linux-image-awsUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1025-gkeopUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.11.0-28-generic-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-1016-gcpUpgrade linux-image-6.8.0-2032-raspi-realtimeUpgrade linux-image-6.8.0-1042-gcpUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.11.0-1015-lowlatency-64kUpgrade linux-image-lowlatency-6.11Upgrade linux-image-gke-64kUpgrade linux-image-generic-6.8Upgrade linux-image-gcpUpgrade linux-image-aws-6.8Upgrade linux-image-6.11.0-1018-azure-fdeUpgrade linux-image-6.11.0-1017-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-azure-nvidia-6.8Upgrade linux-image-6.8.0-86-lowlatency-64kUpgrade linux-image-6.8.0-1038-oracle-64kUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-6.11.0-1018-azureUpgrade linux-image-virtual-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-azure-fde-6.11Upgrade linux-image-ibm-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1041-nvidia-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-raspiUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-azureUpgrade linux-image-6.11.0-1024-oemUpgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-azure-fde-edgeUpgrade linux-image-azure-6.11Upgrade linux-image-6.8.0-86-genericUpgrade linux-image-6.11.0-1016-gcp-64kUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-6.11.0-28-genericUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1038-oracleUpgrade linux-image-6.8.0-86-generic-64kUpgrade linux-image-lowlatency-64k-6.11Upgrade linux-image-kvmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1041-nvidiaUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-generic-64k-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-aws-lts-24.04 | Jun 26, 2025 | Apr 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub