CVE-2025-68814
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2025
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
io_uring: fix filename leak in __io_openat_prep()
In the Linux kernel, the following vulnerability has been resolved: io_uring: fix filename leak in __io_openat_prep() __io_openat_prep() allocates a struct filename using getname(). However, for the condition of the file being installed in the fixed file table as well as having O_CLOEXEC flag set, the function returns early. At that point, the request doesn't have REQ_F_NEED_CLEANUP flag set. Due to this, the memory for the newly allocated struct filename is not cleaned up, causing a memory leak. Fix this by setting the REQ_F_NEED_CLEANUP for the request just after the successful getname() call, so that when the request is torn down, the filename will be cleaned up, along with other resources needing cleanup.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| b9445598d8c60a1379887b957024b71343965f74 | affected | git | 2420ef01b2e836fbc05a0a8c73a1016504eb0458 | Unavailable | None listed |
| b9445598d8c60a1379887b957024b71343965f74 | affected | git | 8f44c4a550570cd5903625133f938c6b51310c9b | Unavailable | None listed |
| b9445598d8c60a1379887b957024b71343965f74 | affected | git | 18b99fa603d0df5e1c898699c17d3b92ddc80746 | Unavailable | None listed |
| b9445598d8c60a1379887b957024b71343965f74 | affected | git | e232269d511566b1f80872256a48593acc1becf4 | Unavailable | None listed |
| b9445598d8c60a1379887b957024b71343965f74 | affected | git | 7fbfb85b05bc960cc50e09d03e5e562131e48d45 | Unavailable | None listed |
| b9445598d8c60a1379887b957024b71343965f74 | affected | git | b14fad555302a2104948feaff70503b64c80ac01 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 5.15 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 5.15 | Unavailable | None listed |
| 5.15.198 | unaffected | semver | Unavailable | 5.15.* | None listed |
| 6.1.160 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.6.120 | unaffected | semver | Unavailable | 6.6.* | None listed |
| 6.12.64 | unaffected | semver | Unavailable | 6.12.* | None listed |
| 6.18.3 | unaffected | semver | Unavailable | 6.18.* | None listed |
| 6.19 | unaffected | original_commit_for_fix | Unavailable | * | None listed |