CVE-2025-22065

Summary

CVE-2025-22072 is a vulnerability affecting the Linux kernel that involves an issue with gang directory lifetimes in the spufs subsystem. Prior to a misapplied fix, the removal of gang directories failed when someone kept a context belonging to that gang alive. The fix, which was applied incorrectly, resulted in unbalanced file operations and potential leaks. The vulnerability was caused by the removal of dentry pinning and the deletion of rmdir on close. The solution includes reverting the problematic commit, adding a counter to the gang directory inode, and using simple_recursive_removal() to safely remove the gang directory when the counter reaches zero.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.