CVE-2025-37983: vulnerability in Linux
qibfs: fix _another_ leak
Published · Updated
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.2%
exploitation probability
0.2%top 92% of all CVEs
observed exploitation
nono source reports it
In the Linux kernel, the following vulnerability has been resolved:
qibfs: fix _another_ leak
failure to allocate inode => leaked dentry...
this one had been there since the initial merge; to be fair,
if we are that far OOM, the odds of failing at that particular
allocation are low...
Affected products
Linux · LinuxRelated CVEs — Linux
In the same product, most dangerous first.
CVE-2024-53197HIGHALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devicesEPSS 4.1%KEVCVE-2026-31431HIGHcrypto: algif_aead - Revert to operating out-of-placeEPSS 3.4%KEVCVE-2024-53104HIGHmedia: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_formatEPSS 3.4%KEVCVE-2025-39682CRITICALtls: fix handling of zero-length records on the rx_listEPSS 2.9%KEVCVE-2024-36971HIGHnet: fix __dst_negative_advice() raceEPSS 2.7%KEVCVE-2025-39964HIGHcrypto: af_alg - Disallow concurrent writes in af_alg_sendmsgEPSS 1.4%KEV
References
https://git.kernel.org/stable/c/24faa6ea274a2b96d0a78a0996c3137c2b2a65f0https://git.kernel.org/stable/c/3c2fde33e3e505dfd1a895d1f24bad650c655e14https://git.kernel.org/stable/c/47ab2caba495c1d6a899d284e541a8df656dcfe9https://git.kernel.org/stable/c/545defa656568c74590317cd30068f85134a8216https://git.kernel.org/stable/c/5d53e88d8370b9ab14dd830abb410d9a2671edb6https://git.kernel.org/stable/c/5e280cce3a29b7fe7b828c6ccd5aa5ba87ceb6b6https://git.kernel.org/stable/c/5fe708c5e3c8b2152c6caaa67243e431a5d6cca3https://git.kernel.org/stable/c/bdb43af4fdb39f844ede401bdb1258f67a580a27https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html