CVE-2025-22026

nfsd: don't ignore the return code of svc_proc_register()

State: Published
Severity: Not scored
Published: Apr 16, 2025
Updated: Jun 19, 2026
Reserved: Dec 29, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

nfsd: don't ignore the return code of svc_proc_register()

Currently, nfsd_proc_stat_init() ignores the return value of svc_proc_register(). If the procfile creation fails, then the kernel will WARN when it tries to remove the entry later.

Fix nfsd_proc_stat_init() to return the same type of pointer as svc_proc_register(), and fix up nfsd_net_init() to check that and fail the nfsd_net construction if it occurs.

svc_proc_register() can fail if the dentry can't be allocated, or if an identical dentry already exists. The second case is pretty unlikely in the nfsd_net construction codepath, so if this happens, return -ENOMEM.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	5545496966631cd40ad3aa6450be56d0e5773d10 to before 51107e768de6821b68aa34a136d07bc7a09cf6c3Affected 73c43bccf25cec9cdec62fc22a513c28a4b28390 to before e4316bd85e42b01125b2aab691769234a388b8a3Affected 10ece754df9a799131a1cf3197e9d26c04ddec22 to before 51da899c209a9624e48be416bd30e7ed5cd6c3d8Affected 6f8d6ed3426a17f77628cebfb6a6e2c6f2b2496c to before 30405b23b4d5e2a596fb756d48119d7293194e75Affected 93483ac5fec62cc1de166051b219d953bb5e4ef4 to before 6a59b70fe71ec66c0dd19e2c279c71846a3fb2f0Affected 93483ac5fec62cc1de166051b219d953bb5e4ef4 to before e31957a819e60cf0bc9a49408765e6095fd3d046Affected 93483ac5fec62cc1de166051b219d953bb5e4ef4 to before 9d9456185fd5f1891c74354ee297f19538141eadAffected 93483ac5fec62cc1de166051b219d953bb5e4ef4 to before 930b64ca0c511521f0abdd1d57ce52b2a6e3476bAffected b7b05f98f3f06fea3986b46e5c7fe2928676b02dAffected 5.10.226 to before 5.10.259Affected 5.15.166 to before 5.15.210Affected 6.1.106 to before 6.1.164Affected 6.6.47 to before 6.6.125Affected 6.8.10 to before 6.9Affected
LinuxLinux	6.9Affected before 6.9Not affected 5.10.259 through 5.10.Not affected 5.15.210 through 5.15.Not affected 6.1.164 through 6.1.Not affected 6.6.125 through 6.6.Not affected 6.12.24 through 6.12.Not affected 6.13.12 through 6.13.Not affected 6.14.2 through 6.14.*Not affected 6.15 and laterNot affected

Product

Versions

LinuxLinux

5545496966631cd40ad3aa6450be56d0e5773d10 to before 51107e768de6821b68aa34a136d07bc7a09cf6c3Affected
73c43bccf25cec9cdec62fc22a513c28a4b28390 to before e4316bd85e42b01125b2aab691769234a388b8a3Affected
10ece754df9a799131a1cf3197e9d26c04ddec22 to before 51da899c209a9624e48be416bd30e7ed5cd6c3d8Affected
6f8d6ed3426a17f77628cebfb6a6e2c6f2b2496c to before 30405b23b4d5e2a596fb756d48119d7293194e75Affected
93483ac5fec62cc1de166051b219d953bb5e4ef4 to before 6a59b70fe71ec66c0dd19e2c279c71846a3fb2f0Affected
93483ac5fec62cc1de166051b219d953bb5e4ef4 to before e31957a819e60cf0bc9a49408765e6095fd3d046Affected
93483ac5fec62cc1de166051b219d953bb5e4ef4 to before 9d9456185fd5f1891c74354ee297f19538141eadAffected
93483ac5fec62cc1de166051b219d953bb5e4ef4 to before 930b64ca0c511521f0abdd1d57ce52b2a6e3476bAffected
b7b05f98f3f06fea3986b46e5c7fe2928676b02dAffected
5.10.226 to before 5.10.259Affected
5.15.166 to before 5.15.210Affected
6.1.106 to before 6.1.164Affected
6.6.47 to before 6.6.125Affected
6.8.10 to before 6.9Affected

LinuxLinux

6.9Affected
before 6.9Not affected
5.10.259 through 5.10.*Not affected
5.15.210 through 5.15.*Not affected
6.1.164 through 6.1.*Not affected
6.6.125 through 6.6.*Not affected
6.12.24 through 6.12.*Not affected
6.13.12 through 6.13.*Not affected
6.14.2 through 6.14.*Not affected
6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.