CVE-2025-22026

MediumCVSS 5.5/10Last modified Jun 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

nfsd: don't ignore the return code of svc_proc_register()

Currently, nfsd_proc_stat_init() ignores the return value of svc_proc_register(). If the procfile creation fails, then the kernel will WARN when it tries to remove the entry later.

Fix nfsd_proc_stat_init() to return the same type of pointer as svc_proc_register(), and fix up nfsd_net_init() to check that and fail the nfsd_net construction if it occurs.

svc_proc_register() can fail if the dentry can't be allocated, or if an identical dentry already exists. The second case is pretty unlikely in the nfsd_net construction codepath, so if this happens, return -ENOMEM.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

VendorProductVersions
LinuxLinux>= 5545496966631cd40ad3aa6450be56d0e5773d10, < 51107e768de6821b68aa34a136d07bc7a09cf6c3; >= 73c43bccf25cec9cdec62fc22a513c28a4b28390, < e4316bd85e42b01125b2aab691769234a388b8a3; >= 10ece754df9a799131a1cf3197e9d26c04ddec22, < 51da899c209a9624e48be416bd30e7ed5cd6c3d8; >= 6f8d6ed3426a17f77628cebfb6a6e2c6f2b2496c, < 30405b23b4d5e2a596fb756d48119d7293194e75; >= 93483ac5fec62cc1de166051b219d953bb5e4ef4, < 6a59b70fe71ec66c0dd19e2c279c71846a3fb2f0; >= 93483ac5fec62cc1de166051b219d953bb5e4ef4, < e31957a819e60cf0bc9a49408765e6095fd3d046; >= 93483ac5fec62cc1de166051b219d953bb5e4ef4, < 9d9456185fd5f1891c74354ee297f19538141ead; >= 93483ac5fec62cc1de166051b219d953bb5e4ef4, < 930b64ca0c511521f0abdd1d57ce52b2a6e3476b; b7b05f98f3f06fea3986b46e5c7fe2928676b02d; >= 5.10.226, < 5.10.259; >= 5.15.166, < 5.15.210; >= 6.1.106, < 6.1.164; >= 6.6.47, < 6.6.125; >= 6.8.10, < 6.9
LinuxLinux6.9

References

Timeline

Published
Apr 16, 2025
Last modified
Jun 19, 2026
NVD status
Modified

Related CVEs from 2025

CVE-2025-220274.7In the Linux kernel, the following vulnerability has been resolved: media: streamzap: fix race between device disconnection and urb callbacCVE-2025-220285.5In the Linux kernel, the following vulnerability has been resolved: media: vimc: skip .s_stream() for stopped entities Syzbot reported [1]CVE-2025-22036.1The FunnelKit WordPress plugin before 3.10.2 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins tCVE-2025-220305.5In the Linux kernel, the following vulnerability has been resolved: mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead() CCVE-2025-220315.5In the Linux kernel, the following vulnerability has been resolved: PCI/bwctrl: Fix NULL pointer dereference on bus number exhaustion WhenCVE-2025-220325.5In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: fix kernel panic due to null pointer dereference ACVE-2025-220335.5In the Linux kernel, the following vulnerability has been resolved: arm64: Don't call NULL in do_compat_alignment_fixup() do_alignment_t32CVE-2025-220345.5In the Linux kernel, the following vulnerability has been resolved: mm/gup: reject FOLL_SPLIT_PMD with hugetlb VMAs Patch series "mm: fixeCVE-2025-220357.8In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free in print_graph_function_flags during tracerCVE-2025-220367.0In the Linux kernel, the following vulnerability has been resolved: exfat: fix random stack corruption after get_block When get_block is cCVE-2025-220377.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference in alloc_preauth_hash() The ClientCVE-2025-220387.1In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate zero num_subauth before sub_auth is accessed Access ps