CVE-2025-22070

🗓️ 16 Apr 2025 14:12:23Reported by LinuxType

cve🔗 web.nvd.nist.gov👁 115 Views🌐 WEB

Fix NULL pointer dereference issue in Linux kernel 9p client mkdir operation.

Reporter	Title	Published	Views	Family All 198
AstraLinux	Astra Linux – Vulnerability in Linux 5.10	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability in the v9fs_vfs_mkdir_dotl() function of the fs/9p/vfs inodeDotl.c module of the Linux kernel file system allows a attacker to cause a service failure.	8 Feb 202600:00	–	bdu_fstec
CNNVD	Linux kernel 安全漏洞	16 Apr 202500:00	–	cnnvd
Cvelist	CVE-2025-22070 fs/9p: fix NULL pointer dereference on mkdir	16 Apr 202514:12	–	cvelist
Debian CVE	CVE-2025-22070	16 Apr 202514:12	–	debiancve
Oracle linux	Unbreakable Enterprise kernel security update	17 Jul 202500:00	–	oraclelinux
EUVD	EUVD-2025-11220	3 Oct 202520:07	–	euvd
Hewlett-Packard	HP ThinPro 8.1 SP9 Security Updates	2 Feb 202600:00	–	hp
Microsoft CVE	fs/9p: fix NULL pointer dereference on mkdir	3 Sep 202523:03	–	mscve
NVD	CVE-2025-22070	16 Apr 202515:16	–	nvd

NVD

Vulners

CNA

Node

linux linux_kernelRange6.0–6.12.23

linux linux_kernelRange6.13–6.13.11

linux linux_kernelRange6.14–6.14.2

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "fs/9p/vfs_inode_dotl.c"
    ],
    "versions": [
      {
        "version": "dafbe689736f62c696ac64809b17bdc752cfbe76",
        "lessThan": "8522051c58d68146b93e8a5ba9987e83b3d64e7b",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "dafbe689736f62c696ac64809b17bdc752cfbe76",
        "lessThan": "2139dea5c53e3bb63ac49a6901c85e525a80ee8a",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "dafbe689736f62c696ac64809b17bdc752cfbe76",
        "lessThan": "6517b395cb1e43fbf3962dd93e6fb4a5e5ab100e",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "dafbe689736f62c696ac64809b17bdc752cfbe76",
        "lessThan": "3f61ac7c65bdb26accb52f9db66313597e759821",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "fs/9p/vfs_inode_dotl.c"
    ],
    "versions": [
      {
        "version": "6.0",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "6.0",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.23",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.13.11",
        "lessThanOrEqual": "6.13.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.14.2",
        "lessThanOrEqual": "6.14.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.15",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/3f61ac7c65bdb26accb52f9db66313597e759821
git	www.git.kernel.org/stable/c/6517b395cb1e43fbf3962dd93e6fb4a5e5ab100e
git	www.git.kernel.org/stable/c/2139dea5c53e3bb63ac49a6901c85e525a80ee8a
git	www.git.kernel.org/stable/c/8522051c58d68146b93e8a5ba9987e83b3d64e7b

Parameter	Position	Path	Description	CWE
fid	path	fs/9p/vfs_inode_dotl.c:v9fs_vfs_mkdir_dotl	NULL pointer dereference in mkdir when posixacl is used; creates directory with invalid fid handling due to incorrect call order in v9fs_vfs_mkdir_dotl (set_create_acl before fid_add).	CWE-476

17 Jun 2026 08:44Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.15.5

EPSS0.00189

SSVC

CWE-476