CVE-2025-22026 - CVE House
Back to Database
Status published Unknown CVE-2025-22026

nfsd: don't ignore the return code of svc_proc_register()

Vulnerability Description

In the Linux kernel, the following vulnerability has been resolved: nfsd: don't ignore the return code of svc_proc_register() Currently, nfsd_proc_stat_init() ignores the return value of svc_proc_register(). If the procfile creation fails, then the kernel will WARN when it tries to remove the entry later. Fix nfsd_proc_stat_init() to return the same type of pointer as svc_proc_register(), and fix up nfsd_net_init() to check that and fail the nfsd_net construction if it occurs. svc_proc_register() can fail if the dentry can't be allocated, or if an identical dentry already exists. The second case is pretty unlikely in the nfsd_net construction codepath, so if this happens, return -ENOMEM.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-22026

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Affected Software

Linux
Vulnerable Versions:
5545496966631cd40ad3aa6450be56d0e5773d10, 73c43bccf25cec9cdec62fc22a513c28a4b28390, 10ece754df9a799131a1cf3197e9d26c04ddec22, 6f8d6ed3426a17f77628cebfb6a6e2c6f2b2496c, 93483ac5fec62cc1de166051b219d953bb5e4ef4, b7b05f98f3f06fea3986b46e5c7fe2928676b02d, 5.10.226, 5.15.166, 6.1.106, 6.6.47, 6.8.10, 6.9, 0, 5.10.259, 5.15.210, 6.1.164, 6.6.125, 6.12.24, 6.13.12, 6.14.2, 6.15

Timeline

Official Publish: April 16th, 2025
Last Modified: June 19th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.