{"id":"CVE-2025-22026","state":"PUBLISHED","title":"nfsd: don't ignore the return code of svc_proc_register()","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: don't ignore the return code of svc_proc_register()\n\nCurrently, nfsd_proc_stat_init() ignores the return value of\nsvc_proc_register(). If the procfile creation fails, then the kernel\nwill WARN when it tries to remove the entry later.\n\nFix nfsd_proc_stat_init() to return the same type of pointer as\nsvc_proc_register(), and fix up nfsd_net_init() to check that and fail\nthe nfsd_net construction if it occurs.\n\nsvc_proc_register() can fail if the dentry can't be allocated, or if an\nidentical dentry already exists. The second case is pretty unlikely in\nthe nfsd_net construction codepath, so if this happens, return -ENOMEM.","publishedAt":"2025-04-16T14:11:47.243Z","updatedAt":"2026-06-19T11:57:15.085Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"5545496966631cd40ad3aa6450be56d0e5773d10","status":"affected","lessThan":"51107e768de6821b68aa34a136d07bc7a09cf6c3","versionType":"git"},{"version":"73c43bccf25cec9cdec62fc22a513c28a4b28390","status":"affected","lessThan":"e4316bd85e42b01125b2aab691769234a388b8a3","versionType":"git"},{"version":"10ece754df9a799131a1cf3197e9d26c04ddec22","status":"affected","lessThan":"51da899c209a9624e48be416bd30e7ed5cd6c3d8","versionType":"git"},{"version":"6f8d6ed3426a17f77628cebfb6a6e2c6f2b2496c","status":"affected","lessThan":"30405b23b4d5e2a596fb756d48119d7293194e75","versionType":"git"},{"version":"93483ac5fec62cc1de166051b219d953bb5e4ef4","status":"affected","lessThan":"6a59b70fe71ec66c0dd19e2c279c71846a3fb2f0","versionType":"git"},{"version":"93483ac5fec62cc1de166051b219d953bb5e4ef4","status":"affected","lessThan":"e31957a819e60cf0bc9a49408765e6095fd3d046","versionType":"git"},{"version":"93483ac5fec62cc1de166051b219d953bb5e4ef4","status":"affected","lessThan":"9d9456185fd5f1891c74354ee297f19538141ead","versionType":"git"},{"version":"93483ac5fec62cc1de166051b219d953bb5e4ef4","status":"affected","lessThan":"930b64ca0c511521f0abdd1d57ce52b2a6e3476b","versionType":"git"},{"version":"b7b05f98f3f06fea3986b46e5c7fe2928676b02d","status":"affected","versionType":"git"},{"version":"5.10.226","status":"affected","lessThan":"5.10.259","versionType":"semver"},{"version":"5.15.166","status":"affected","lessThan":"5.15.210","versionType":"semver"},{"version":"6.1.106","status":"affected","lessThan":"6.1.164","versionType":"semver"},{"version":"6.6.47","status":"affected","lessThan":"6.6.125","versionType":"semver"},{"version":"6.8.10","status":"affected","lessThan":"6.9","versionType":"semver"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["fs/nfsd/nfsctl.c","fs/nfsd/stats.c","fs/nfsd/stats.h"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"6.9","status":"affected"},{"version":"0","status":"unaffected","lessThan":"6.9","versionType":"semver"},{"version":"5.10.259","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.210","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.164","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.125","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.24","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.13.12","status":"unaffected","lessThanOrEqual":"6.13.*","versionType":"semver"},{"version":"6.14.2","status":"unaffected","lessThanOrEqual":"6.14.*","versionType":"semver"},{"version":"6.15","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["fs/nfsd/nfsctl.c","fs/nfsd/stats.c","fs/nfsd/stats.h"]}],"references":["https://git.kernel.org/stable/c/51107e768de6821b68aa34a136d07bc7a09cf6c3","https://git.kernel.org/stable/c/e4316bd85e42b01125b2aab691769234a388b8a3","https://git.kernel.org/stable/c/51da899c209a9624e48be416bd30e7ed5cd6c3d8","https://git.kernel.org/stable/c/30405b23b4d5e2a596fb756d48119d7293194e75","https://git.kernel.org/stable/c/6a59b70fe71ec66c0dd19e2c279c71846a3fb2f0","https://git.kernel.org/stable/c/e31957a819e60cf0bc9a49408765e6095fd3d046","https://git.kernel.org/stable/c/9d9456185fd5f1891c74354ee297f19538141ead","https://git.kernel.org/stable/c/930b64ca0c511521f0abdd1d57ce52b2a6e3476b"],"weaknesses":[],"ingestedAt":"2026-10-29T20:08:39.238Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/22xxx/CVE-2025-22026.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-22026","state":"PUBLISHED","datePublished":"2025-04-16T14:11:47.243Z","dateUpdated":"2026-06-19T11:57:15.085Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2024-12-29T08:45:45.807Z"},"containers":{"cna":{"title":"nfsd: don't ignore the return code of svc_proc_register()","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: don't ignore the return code of svc_proc_register()\n\nCurrently, nfsd_proc_stat_init() ignores the return value of\nsvc_proc_register(). If the procfile creation fails, then the kernel\nwill WARN when it tries to remove the entry later.\n\nFix nfsd_proc_stat_init() to return the same type of pointer as\nsvc_proc_register(), and fix up nfsd_net_init() to check that and fail\nthe nfsd_net construction if it occurs.\n\nsvc_proc_register() can fail if the dentry can't be allocated, or if an\nidentical dentry already exists. The second case is pretty unlikely in\nthe nfsd_net construction codepath, so if this happens, return -ENOMEM."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"5545496966631cd40ad3aa6450be56d0e5773d10","status":"affected","lessThan":"51107e768de6821b68aa34a136d07bc7a09cf6c3","versionType":"git"},{"version":"73c43bccf25cec9cdec62fc22a513c28a4b28390","status":"affected","lessThan":"e4316bd85e42b01125b2aab691769234a388b8a3","versionType":"git"},{"version":"10ece754df9a799131a1cf3197e9d26c04ddec22","status":"affected","lessThan":"51da899c209a9624e48be416bd30e7ed5cd6c3d8","versionType":"git"},{"version":"6f8d6ed3426a17f77628cebfb6a6e2c6f2b2496c","status":"affected","lessThan":"30405b23b4d5e2a596fb756d48119d7293194e75","versionType":"git"},{"version":"93483ac5fec62cc1de166051b219d953bb5e4ef4","status":"affected","lessThan":"6a59b70fe71ec66c0dd19e2c279c71846a3fb2f0","versionType":"git"},{"version":"93483ac5fec62cc1de166051b219d953bb5e4ef4","status":"affected","lessThan":"e31957a819e60cf0bc9a49408765e6095fd3d046","versionType":"git"},{"version":"93483ac5fec62cc1de166051b219d953bb5e4ef4","status":"affected","lessThan":"9d9456185fd5f1891c74354ee297f19538141ead","versionType":"git"},{"version":"93483ac5fec62cc1de166051b219d953bb5e4ef4","status":"affected","lessThan":"930b64ca0c511521f0abdd1d57ce52b2a6e3476b","versionType":"git"},{"version":"b7b05f98f3f06fea3986b46e5c7fe2928676b02d","status":"affected","versionType":"git"},{"version":"5.10.226","status":"affected","lessThan":"5.10.259","versionType":"semver"},{"version":"5.15.166","status":"affected","lessThan":"5.15.210","versionType":"semver"},{"version":"6.1.106","status":"affected","lessThan":"6.1.164","versionType":"semver"},{"version":"6.6.47","status":"affected","lessThan":"6.6.125","versionType":"semver"},{"version":"6.8.10","status":"affected","lessThan":"6.9","versionType":"semver"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["fs/nfsd/nfsctl.c","fs/nfsd/stats.c","fs/nfsd/stats.h"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"6.9","status":"affected"},{"version":"0","status":"unaffected","lessThan":"6.9","versionType":"semver"},{"version":"5.10.259","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.210","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.164","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.6.125","status":"unaffected","lessThanOrEqual":"6.6.*","versionType":"semver"},{"version":"6.12.24","status":"unaffected","lessThanOrEqual":"6.12.*","versionType":"semver"},{"version":"6.13.12","status":"unaffected","lessThanOrEqual":"6.13.*","versionType":"semver"},{"version":"6.14.2","status":"unaffected","lessThanOrEqual":"6.14.*","versionType":"semver"},{"version":"6.15","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["fs/nfsd/nfsctl.c","fs/nfsd/stats.c","fs/nfsd/stats.h"]}],"references":[{"url":"https://git.kernel.org/stable/c/51107e768de6821b68aa34a136d07bc7a09cf6c3"},{"url":"https://git.kernel.org/stable/c/e4316bd85e42b01125b2aab691769234a388b8a3"},{"url":"https://git.kernel.org/stable/c/51da899c209a9624e48be416bd30e7ed5cd6c3d8"},{"url":"https://git.kernel.org/stable/c/30405b23b4d5e2a596fb756d48119d7293194e75"},{"url":"https://git.kernel.org/stable/c/6a59b70fe71ec66c0dd19e2c279c71846a3fb2f0"},{"url":"https://git.kernel.org/stable/c/e31957a819e60cf0bc9a49408765e6095fd3d046"},{"url":"https://git.kernel.org/stable/c/9d9456185fd5f1891c74354ee297f19538141ead"},{"url":"https://git.kernel.org/stable/c/930b64ca0c511521f0abdd1d57ce52b2a6e3476b"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-06-19T11:57:15.085Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.10.226","versionEndExcluding":"5.10.259"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"5.15.166","versionEndExcluding":"5.15.210"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.1.106","versionEndExcluding":"6.1.164"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.6.47","versionEndExcluding":"6.6.125"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.9","versionEndExcluding":"6.12.24"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.9","versionEndExcluding":"6.13.12"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.9","versionEndExcluding":"6.14.2"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.9","versionEndExcluding":"6.15"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"6.8.10"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2025-22026","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-06-10T20:40:43.644362Z"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-06-11T18:44:04.589Z"}}]}}}