CVE-2025-37983

qibfs: fix _another_ leak

MEDIUM

5.5

CVSS Score

Published: May 20, 2025 at 05:09 PM UTC

Updated: June 17, 2026 at 09:15 AM UTC

2 products affected across 2 vendorsLinux KernelDebian Linux

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: qibfs: fix _another_ leak failure to allocate inode => leaked dentry... this one had been there since the initial merge; to be fair, if we are that far OOM, the odds of failing at that particular allocation are low...

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Debian Linux · Debiandrupal

95%

11.0

Linux Kernel · Linux

95%

v < 5.4.2932.6.35 ≤ v < 5.10.2372.6.35 ≤ v < 5.15.1812.6.35 ≤ v < 5.4.2932.6.35 ≤ v < 6.1.1362.6.35 ≤ v < 6.12.262.6.35 ≤ v < 6.14.52.6.35 ≤ v < 6.152.6.35 ≤ v < 6.6.895.11 ≤ v < 5.15.1815.16 ≤ v < 6.1.1365.5 ≤ v < 5.10.2376.13 ≤ v < 6.14.56.2 ≤ v < 6.6.896.7 ≤ v < 6.12.262.6.35f931551bafe1f10ded7f5282e2aa162c267a2e5d

Vendor states this is fixed in 24faa6ea274a2b96d0a78a0996c3137c2b2a65f0 (fixed)

Vendor states this is fixed in 3c2fde33e3e505dfd1a895d1f24bad650c655e14 (fixed)

Vendor states this is fixed in 47ab2caba495c1d6a899d284e541a8df656dcfe9 (fixed)

Vendor states this is fixed in 545defa656568c74590317cd30068f85134a8216 (fixed)

Vendor states this is fixed in 5d53e88d8370b9ab14dd830abb410d9a2671edb6 (fixed)

Vendor states this is fixed in 5e280cce3a29b7fe7b828c6ccd5aa5ba87ceb6b6 (fixed)

Vendor states this is fixed in 5fe708c5e3c8b2152c6caaa67243e431a5d6cca3 (fixed)

Vendor states this is fixed in bdb43af4fdb39f844ede401bdb1258f67a580a27 (fixed)

Vendor states this is fixed in 2.6.35 (unaffected)

Vendor states this is fixed in 5.10.237 (unaffected)

Vendor states this is fixed in 5.15.181 (unaffected)

Vendor states this is fixed in 5.4.293 (unaffected)