CVE-2025-22070

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference issue occurs when a 9p tree is mounted with the 'posixacl' option and a subdirectory is created. This happens because the v9fs fid add() call in the v9fs vfs mkdir dotl() function sets the fid pointer to NULL, which is then used by the v9fs set create acl() call, expecting a valid non-NULL fid pointer. This results in a kernel NULL pointer dereference.

Recommendations To resolve this issue, the sequence of calls in the v9fs vfs mkdir dotl() function should be swapped, calling v9fs set create acl() before v9fs fid add(). At the moment, there is no information about a newer version that contains a fix for this vulnerability.