CVE-2025-22070

Summary

CVE-2025-22070 is a Linux kernel vulnerability affecting the 9p filesystem. When a directory is mounted with the 'posixacl' option, and its parent directory has a default ACL set for subdirectories, creating a subdirectory can cause a NULL pointer dereference. This occurs because v9fs_fid_add() sets the 'fid' pointer to NULL, but v9fs_set_create_acl() expects a valid non-NULL 'fid' pointer. The issue can be resolved by swapping the order of these two calls in v9fs_vfs_mkdir_dotl(). This change prevents the NULL pointer dereference and subsequent crashes.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.