{"id":"CVE-2025-68814","revision":"2e4de1719dd0429eb08738ecbd4f6745","records":[{"revision":"2e4de1719dd0429eb08738ecbd4f6745","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2025-68814","aliases":[],"title":"io_uring: fix filename leak in __io_openat_prep()","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring: fix filename leak in __io_openat_prep()\n\n __io_openat_prep() allocates a struct filename using getname(). However,\nfor the condition of the file being installed in the fixed file table as\nwell as having O_CLOEXEC flag set, the function returns early. At that\npoint, the request doesn't have REQ_F_NEED_CLEANUP flag set. Due to this,\nthe memory for the newly allocated struct filename is not cleaned up,\ncausing a memory leak.\n\nFix this by setting the REQ_F_NEED_CLEANUP for the request just after the\nsuccessful getname() call, so that when the request is torn down, the\nfilename will be cleaned up, along with other resources needing cleanup.","state":0,"publishedAt":"2026-01-13T15:29:19.129+00:00","modifiedAt":"2026-10-15T01:10:19.16+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"io_uring/openclose.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"b9445598d8c60a1379887b957024b71343965f74\",\n                            \"lessThan\": \"2420ef01b2e836fbc05a0a8c73a1016504eb0458\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"b9445598d8c60a1379887b957024b71343965f74\",\n                            \"lessThan\": \"8f44c4a550570cd5903625133f938c6b51310c9b\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"b9445598d8c60a1379887b957024b71343965f74\",\n                            \"lessThan\": \"18b99fa603d0df5e1c898699c17d3b92ddc80746\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"b9445598d8c60a1379887b957024b71343965f74\",\n                            \"lessThan\": \"e232269d511566b1f80872256a48593acc1becf4\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"b9445598d8c60a1379887b957024b71343965f74\",\n                            \"lessThan\": \"7fbfb85b05bc960cc50e09d03e5e562131e48d45\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"b9445598d8c60a1379887b957024b71343965f74\",\n                            \"lessThan\": \"b14fad555302a2104948feaff70503b64c80ac01\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"io_uring/openclose.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"5.15\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"5.15\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.198\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.160\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.120\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.64\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.3\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.19\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/2420ef01b2e836fbc05a0a8c73a1016504eb0458","https://git.kernel.org/stable/c/8f44c4a550570cd5903625133f938c6b51310c9b","https://git.kernel.org/stable/c/18b99fa603d0df5e1c898699c17d3b92ddc80746","https://git.kernel.org/stable/c/e232269d511566b1f80872256a48593acc1becf4","https://git.kernel.org/stable/c/7fbfb85b05bc960cc50e09d03e5e562131e48d45","https://git.kernel.org/stable/c/b14fad555302a2104948feaff70503b64c80ac01"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-68814","license":"CVE Program Terms of Use","key":"cve-program:CVE-2025-68814","identifiers":["CVE-2025-68814"]},"retained":false,"historicalAffected":[]}],"coverage":[]}