CVE-2025-40105

A flaw was found in the Linux kernel's VFS (Virtual File System) layer. When open_by_handle_at() is called on an uncached inode, a disconnected dentry is created. During reconnection attempts via reconnect_path(), if lookup_one_unlocked() fails to find the target dentry and creates a new one under the parent, this new dentry is not properly marked as disconnected. This inconsistency prevents proper cleanup of dentries, leading to memory leaks. If unmount occurs before memory reclaim, the "Busy inodes after unmount" kernel bug is triggered, causing a system crash.

This vulnerability affects systems using file handle operations (open_by_handle_at). The issue can be triggered by specific sequences of file handle operations combined with filesystem inconsistencies or race conditions. Impact is denial of service through memory leaks or kernel crash on unmount.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.