CVE-2025-22026

Source
https://cve.org/CVERecord?id=CVE-2025-22026
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-22026.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-22026
Downstream
Related
Published
2025-04-16T14:11:47.243Z
Modified
2026-03-20T12:41:17.415668Z
Summary
nfsd: don't ignore the return code of svc_proc_register()
Details

In the Linux kernel, the following vulnerability has been resolved:

nfsd: don't ignore the return code of svcprocregister()

Currently, nfsdprocstatinit() ignores the return value of svcproc_register(). If the procfile creation fails, then the kernel will WARN when it tries to remove the entry later.

Fix nfsdprocstatinit() to return the same type of pointer as svcprocregister(), and fix up nfsdnetinit() to check that and fail the nfsdnet construction if it occurs.

svcprocregister() can fail if the dentry can't be allocated, or if an identical dentry already exists. The second case is pretty unlikely in the nfsd_net construction codepath, so if this happens, return -ENOMEM.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/22xxx/CVE-2025-22026.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
10ece754df9a799131a1cf3197e9d26c04ddec22
Fixed
51da899c209a9624e48be416bd30e7ed5cd6c3d8
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6f8d6ed3426a17f77628cebfb6a6e2c6f2b2496c
Fixed
30405b23b4d5e2a596fb756d48119d7293194e75
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
93483ac5fec62cc1de166051b219d953bb5e4ef4
Fixed
6a59b70fe71ec66c0dd19e2c279c71846a3fb2f0
Fixed
e31957a819e60cf0bc9a49408765e6095fd3d046
Fixed
9d9456185fd5f1891c74354ee297f19538141ead
Fixed
930b64ca0c511521f0abdd1d57ce52b2a6e3476b
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5545496966631cd40ad3aa6450be56d0e5773d10
Last affected
73c43bccf25cec9cdec62fc22a513c28a4b28390
Last affected
b7b05f98f3f06fea3986b46e5c7fe2928676b02d

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-22026.json"