We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2025-21672

afs: Fix merge preference rule failure condition



Description

In the Linux kernel, the following vulnerability has been resolved: afs: Fix merge preference rule failure condition syzbot reported a lock held when returning to userspace[1]. This is because if argc is less than 0 and the function returns directly, the held inode lock is not released. Fix this by store the error in ret and jump to done to clean up instead of returning directly. [dh: Modified Lizhi Xu's original patch to make it honour the error code from afs_split_string()] [1] WARNING: lock held when returning to user space! 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 Not tainted ------------------------------------------------ syz-executor133/5823 is leaving the kernel with locks still held! 1 lock held by syz-executor133/5823: #0: ffff888071cffc00 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: inode_lock include/linux/fs.h:818 [inline] #0: ffff888071cffc00 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: afs_proc_addr_prefs_write+0x2bb/0x14e0 fs/afs/addr_prefs.c:388

Reserved 2024-12-29 | Published 2025-01-31 | Updated 2025-01-31 | Assigner Linux

Product status

Default status
unaffected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 22be1d90a6211c88dd093b25d1f3aa974d0d9f9d
affected

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 17a4fde81d3a7478d97d15304a6d61094a10c2e3
affected

Default status
affected

6.12.11
unaffected

6.13
unaffected

References

git.kernel.org/...c/22be1d90a6211c88dd093b25d1f3aa974d0d9f9d

git.kernel.org/...c/17a4fde81d3a7478d97d15304a6d61094a10c2e3

cve.org (CVE-2025-21672)

nvd.nist.gov (CVE-2025-21672)

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2025-21672

Support options

Helpdesk Chat, Email, Knowledgebase
Subscribe to our newsletter to learn more about our work.