01 Record

CVE-2025-22071

spufs: fix a leak in spufs_create_context()

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

spufs: fix a leak in spufs_create_context()

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.23% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 13.3% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-06-17.
Red Hat severity: No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-04-16 14:12Z1 YR AGO

Last updated

2026-05-11 21:12Z3 MO AGO

Reserved

2024-12-29

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-401Missing Release of Memory after Effective LifetimeVariant

Data version

5.2

Document digest

58b9cf8c0a0fe19c208a61f4d70f4544ac2d04d0d2e88ee3f34221a7875e95c8

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux58119068cb27ef7513f80aff44b62a3a8f40ef5f to < 829bd6139968e2e759f3928cf65ad0db1e302fe3, 58119068cb27ef7513f80aff44b62a3a8f40ef5f to < 410c787d89c92df4215d7b1a338e2c1a8aba6b9b, 58119068cb27ef7513f80aff44b62a3a8f40ef5f to < c4e72a0d75442237b6f3bcca10a7d81b89376d16, 58119068cb27ef7513f80aff44b62a3a8f40ef5f to < a333f223e555d27609f8b45d75a08e8e1d36c432, 58119068cb27ef7513f80aff44b62a3a8f40ef5f to < 239ea3c34673b3244a499fd65771c47e5bffcbb0, 58119068cb27ef7513f80aff44b62a3a8f40ef5f to < d04600f43569d48262e1328eaa1592fcefa2c19c, 58119068cb27ef7513f80aff44b62a3a8f40ef5f to < 5a90b699844a5bb96961e5892e51cc59255444a3, 58119068cb27ef7513f80aff44b62a3a8f40ef5f to < 4a7448c83e117ed68597952ecaede1cebc4427a7, 58119068cb27ef7513f80aff44b62a3a8f40ef5f to < 0f5cce3fc55b08ee4da3372baccf4bcd36a98396, 2.6.25—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/829bd6139968e2e759f3928cf65ad0db1e302fe3
git.kernel.orghttps://git.kernel.org/stable/c/410c787d89c92df4215d7b1a338e2c1a8aba6b9b
git.kernel.orghttps://git.kernel.org/stable/c/c4e72a0d75442237b6f3bcca10a7d81b89376d16
git.kernel.orghttps://git.kernel.org/stable/c/a333f223e555d27609f8b45d75a08e8e1d36c432
git.kernel.orghttps://git.kernel.org/stable/c/239ea3c34673b3244a499fd65771c47e5bffcbb0
git.kernel.orghttps://git.kernel.org/stable/c/d04600f43569d48262e1328eaa1592fcefa2c19c
git.kernel.orghttps://git.kernel.org/stable/c/5a90b699844a5bb96961e5892e51cc59255444a3
git.kernel.orghttps://git.kernel.org/stable/c/4a7448c83e117ed68597952ecaede1cebc4427a7
git.kernel.orghttps://git.kernel.org/stable/c/0f5cce3fc55b08ee4da3372baccf4bcd36a98396
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/05/msg00045.html

01 Record index

CVE-2025-22071

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2025-22071

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References